{"id":"CVE-2018-10103","aliases":["ALPINE-CVE-2018-10103","BELL-CVE-2018-10103","DEBIAN-CVE-2018-10103","DLA-1955-1","DSA-4547-1","EUVD-2018-2182","GHSA-6h64-q58h-x62c","MGASA-2019-0297","RHSA-2020:4760","RHSA-2021:2191","RLSA-2020:4760","SUSE-SU-2019:14191-1","SUSE-SU-2019:2674-1","SUSE-SU-2020:3360-1","UBUNTU-CVE-2018-10103","USN-4252-1","USN-4252-2","openSUSE-SU-2019:2344-1","openSUSE-SU-2019:2348-1","openSUSE-SU-2024:11425-1"],"status":"published","title":"tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).","description":"tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03957,"percentile":0.9051,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2019-09-30T00:00:00Z","modified":"2026-10-24T10:49:31Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"tcpdump","fixed_in":["4.9.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tcpdump","fixed_in":["4.9.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tcpdump","fixed_in":["4.9.3-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tcpdump","fixed_in":["4.9.3-0ubuntu0.14.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"tcpdump","fixed_in":["4.9.3-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"tcpdump","fixed_in":["4.9.3-0ubuntu0.18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1~deb8u1"}]}],"versions":["4.6.2-5","4.6.2-5+deb8u1","4.7.4-1","4.7.4-1~bpo70+1","4.7.4-1~bpo8+1","4.7.4-2","4.7.4-3","4.8.1-1","4.8.1-2","4.9.0-1","4.9.0-1~deb7u1","4.9.0-1~deb7u2","4.9.0-1~deb8u1","4.9.0-2","4.9.0-3","4.9.1-1","4.9.1-2","4.9.1-3","4.9.2-1","4.9.2-1~deb7u1","4.9.2-1~deb8u1","4.9.2-1~deb9u1","4.9.2-2","4.9.2-3","4.9.3~git20190901-1","4.9.3~git20190901-2"],"bundled":24},{"source":"osv","ecosystem":"Debian:9","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1~deb9u1"}]}],"versions":["4.9.0-2","4.9.0-3","4.9.1-1","4.9.1-2","4.9.1-3","4.9.2-1","4.9.2-1~deb7u1","4.9.2-1~deb8u1","4.9.2-1~deb9u1","4.9.2-2","4.9.2-3","4.9.3-1~deb8u1","4.9.3~git20190901-1","4.9.3~git20190901-2"],"bundled":24},{"source":"osv","ecosystem":"Debian:10","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1~deb10u1"}]}],"versions":["4.9.2-3","4.9.3-1~deb8u1","4.9.3-1~deb9u1","4.9.3-1~deb9u2","4.9.3~git20190901-1","4.9.3~git20190901-2"],"bundled":24},{"source":"osv","ecosystem":"Mageia:7","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-1.mga7"}]}],"bundled":32},{"source":"osv","ecosystem":"Mageia:7","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1.mga7"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-1.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-1.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tcpdump-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-1.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.2-7.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"tcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.2-7.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"tcpdump-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.2-7.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.3-1.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.8-1.30.13.1"}]}],"bundled":83},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.8-1.30.13.1"}]}],"bundled":83},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.17.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.17.1"}]}],"bundled":29},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.14.04.1+esm1"}]}],"versions":["4.4.0-1ubuntu1","4.5.1-2ubuntu1","4.5.1-2ubuntu1.1","4.5.1-2ubuntu1.2","4.9.0-1ubuntu1~ubuntu14.04.1","4.9.2-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.16.04.1"}]}],"versions":["4.7.4-1ubuntu1","4.9.0-1ubuntu1~ubuntu16.04.1","4.9.2-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.18.04.1"}]}],"versions":["4.9.2-1","4.9.2-2","4.9.2-2build1","4.9.2-2ubuntu1","4.9.2-3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.16.04.1"}]}],"versions":["4.7.4-1ubuntu1","4.9.0-1ubuntu1~ubuntu16.04.1","4.9.2-0ubuntu0.16.04.1"],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.18.04.1"}]}],"versions":["4.9.2-1","4.9.2-2","4.9.2-2build1","4.9.2-2ubuntu1","4.9.2-3"],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.14.04.1+esm1"}]}],"versions":["4.4.0-1ubuntu1","4.5.1-2ubuntu1","4.5.1-2ubuntu1.1","4.5.1-2ubuntu1.2","4.9.0-1ubuntu1~ubuntu14.04.1","4.9.2-0ubuntu0.14.04.1"],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-lp150.10.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-lp151.4.6.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.99.1-1.2"}]}],"bundled":161}],"products":[{"vendor":"tcpdump","product":"tcpdump"}],"references":[{"url":"https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://seclists.org/bugtraq/2019/Oct/28","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"https://www.debian.org/security/2019/dsa-4547","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://support.f5.com/csp/article/K44551633?utm_source=f5support\u0026amp%3Butm_medium=RSS","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://support.apple.com/kb/HT210788","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://seclists.org/bugtraq/2019/Dec/23","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2019/Dec/26","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20200120-0001/","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://usn.ubuntu.com/4252-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4252-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10103","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU"},{"url":"https://security.netapp.com/advisory/ntap-20200120-0001"},{"url":"https://usn.ubuntu.com/4252-1"},{"url":"https://usn.ubuntu.com/4252-2"},{"url":"https://github.com/advisories/GHSA-6h64-q58h-x62c"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-10103","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-10103","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-10103","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0297.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25565","tags":["report"]},{"url":"https://www.tcpdump.org/libpcap-changes.txt","tags":["web"]},{"url":"https://www.tcpdump.org/tcpdump-changes.txt","tags":["web","report"]},{"url":"https://www.tcpdump.org/public-cve-list.txt","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4760","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760445","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760463","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760464","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760506","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760507","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760513","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760514","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760518","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1804063","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4760.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10103","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10103","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10105","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10105","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10105","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14461","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14461","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14461","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14462","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14462","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14462","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14463","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14463","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14463","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14464","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14464","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14464","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14465","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14465","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14465","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14466","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14466","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14467","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14467","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14467","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14468","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14468","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14468","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14469","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14470","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14470","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14879","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14879","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14879","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14880","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14880","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14880","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14881","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14881","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14881","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14882","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14882","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14882","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16227","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16227","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16227","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16228","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16228","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16228","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16229","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16229","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16229","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16230","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16230","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16230","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16300","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16300","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16300","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16451","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16451","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16451","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16452","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16452","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16452","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15166","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2191","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2191.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:4760","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1057247","tags":["report"]},{"url":"https://bugzilla.suse.com/1153098","tags":["report"]},{"url":"https://bugzilla.suse.com/1153332","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15166","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192674-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1068716","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1010220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15167","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203360-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1178466","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8037","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-10103","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4252-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4252-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-16808","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10105","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14468","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14469","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14880","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14882","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15166","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-1010220","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MKQWXXAEJMKN6KVJXWDQTBKWQTVSGWAA/#MKQWXXAEJMKN6KVJXWDQTBKWQTVSGWAA","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZPOIE2ZQZQ57X2YSWXD43L2MIX37I54G/#ZPOIE2ZQZQ57X2YSWXD43L2MIX37I54G","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19519","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-10103","description":"tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).","status":"published","published":"2019-10-03T15:05:26Z","modified":"2024-08-05T07:32:01.034Z","updated_at":"2026-11-02T14:35:01.619448Z"}],"euvd":[{"id":"EUVD-2018-2182","description":"tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).","status":"published","published":"2019-10-03T15:05:26Z","modified":"2024-08-05T07:32:01Z","updated_at":"2026-11-03T02:39:59.5072Z"}],"ghsa":[{"id":"GHSA-6h64-q58h-x62c","title":"tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).","description":"tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).","status":"published","published":"2022-05-24T16:57:43Z","modified":"2024-04-11T21:08:49Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:57:07.421443Z"}],"nvd":[{"id":"CVE-2018-10103","description":"tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).","status":"published","published":"2019-10-03T16:15:11.257Z","modified":"2026-06-17T01:33:30.747Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:04:59.278647Z"}],"osv":[{"id":"ALPINE-CVE-2018-10103","description":"tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).","status":"published","published":"2019-10-03T16:15:11.257Z","modified":"2026-10-23T17:17:55.158273305Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"BELL-CVE-2018-10103","title":"CVE-2018-10103 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:32.65955Z","modified":"2026-01-26T09:48:22.957667Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-10103","description":"tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).","status":"published","published":"2019-10-03T16:15:11.257Z","modified":"2026-10-24T10:49:31.891932677Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"DEBIAN-CVE-2018-10103","description":"tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).","status":"published","published":"2019-10-03T16:15:11.257Z","modified":"2026-10-23T18:02:56.303177434Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"RHSA-2020:4760","title":"Red Hat Security Advisory: tcpdump security, bug fix, and enhancement update","status":"published","published":"2024-09-16T04:26:41Z","modified":"2026-01-14T11:02:56.10268Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2021:2191","title":"Red Hat Security Advisory: tcpdump security update","status":"published","published":"2024-09-16T04:26:49Z","modified":"2026-01-14T11:03:05.428926Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RLSA-2020:4760","title":"Moderate: tcpdump security, bug fix, and enhancement update","description":"The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nThe following packages have been upgraded to a later upstream version: tcpdump (4.9.3). (BZ#1804063)\n\nSecurity Fix(es):\n\n* tcpdump: SMB data printing mishandled (CVE-2018-10103)\n\n* tcpdump: SMB data printing mishandled (CVE-2018-10105)\n\n* tcpdump: Out of bounds read/write in get_next_file() in tcpdump.c (CVE-2018-14879)\n\n* tcpdump: Buffer over-read in ldp_tlv_print() function in print-ldp.c (CVE-2018-14461)\n\n* tcpdump: Buffer over-read in icmp_print() function in print-icmp.c (CVE-2018-14462)\n\n* tcpdump: Buffer over-read in vrrp_print() function in print-vrrp.c (CVE-2018-14463)\n\n* tcpdump: Buffer over-read in lmp_print_data_link_subobjs() function in print-lmp.c (CVE-2018-14464)\n\n* tcpdump: Buffer over-read in rsvp_obj_print() function in print-rsvp.c (CVE-2018-14465)\n\n* tcpdump: Buffer over-read in print-icmp6.c (CVE-2018-14466)\n\n* tcpdump: Buffer over-read in bgp_capabilities_print() in print-bgp.c (CVE-2018-14467)\n\n* tcpdump: Buffer over-read in mfr_print() function in print-fr.c (CVE-2018-14468)\n\n* tcpdump: Buffer over-read in ikev1_n_print() function in print-isakmp.c (CVE-2018-14469)\n\n* tcpdump: Buffer over-read in babel_print_v2() in print-babel.c (CVE-2018-14470)\n\n* tcpdump: Buffer over-read in ospf6_print_lshdr() function in print-ospf6.c (CVE-2018-14880)\n\n* tcpdump: Buffer over-read in bgp_capabilities_print() function in print-bgp.c (CVE-2018-14881)\n\n* tcpdump: Buffer over-read in function rpl_dio_printopt in print-icmp6.c (CVE-2018-14882)\n\n* tcpdump: Buffer over-read in print-802_11.c (CVE-2018-16227)\n\n* tcpdump: Access to uninitialized buffer in print_prefix() function in print-hncp.c (CVE-2018-16228)\n\n* tcpdump: Buffer over-read in dccp_print_option() function in print-dccp.c (CVE-2018-16229)\n\n* tcpdump: Buffer over-read in bgp_attr_print() function in print-bgp.c (CVE-2018-16230)\n\n* tcpdump: Resource exhaustion in bgp_attr_print() function in print-bgp.c (CVE-2018-16300)\n\n* tcpdump: Buffer over-read in print_trans() function in print-smb.c (CVE-2018-16451)\n\n* tcpdump: Resource exhaustion in smb_fdata() funtion in smbutil.c (CVE-2018-16452)\n\n* tcpdump: Buffer overflow in lmp_print_data_link_subobjs() in print-lmp.c (CVE-2019-15166)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:33:49Z","modified":"2026-02-05T14:30:05.747489Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2018-10103","description":"tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).","status":"published","published":"2019-09-30T00:00:00Z","modified":"2026-02-04T04:37:57.887793Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"DLA-1955-1","title":"tcpdump - security update","status":"published","published":"2019-10-10T00:00:00Z","modified":"2026-03-09T01:23:10.4009Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4547-1","title":"tcpdump - security update","status":"published","published":"2019-10-21T00:00:00Z","modified":"2026-03-09T02:10:10.793295Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2019-0297","title":"Updated libpcap and tcpdump packages fix security vulnerabilities","description":"Updated libpcap and tcpdump packages fix security vulnerabilities:\n\nThe libpcap packages have been updated to versions 1.9.1 and tcpdump\nto 4.9.3, respectively, fixing several buffer overread and overflow\nissues.\n","status":"published","published":"2019-10-16T22:22:41Z","modified":"2026-04-16T04:44:25.592800208Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:2344-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098).\n- CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098).\n- CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098).\n- CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098).\n- CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098).\n- CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098).\n- CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098).\n- CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098).\n- CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098).\n- CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098).\n- CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098).\n- CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098).\n- CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098).\n- CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098).\n- CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098).\n- CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098).\n- CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098).\n- CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098).\n- CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098).\n- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098).\n- CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \\MAILSLOT\\BROWSE and \\PIPE\\LANMAN (bsc#1153098).\n- CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098).\n- CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-10-20T16:18:13Z","modified":"2026-02-04T02:49:18.186867Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2348-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098).\n- CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098).\n- CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098).\n- CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098).\n- CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098).\n- CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098).\n- CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098).\n- CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098).\n- CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098).\n- CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098).\n- CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098).\n- CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098).\n- CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098).\n- CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098).\n- CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098).\n- CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098).\n- CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098).\n- CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098).\n- CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098).\n- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098).\n- CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \\MAILSLOT\\BROWSE and \\PIPE\\LANMAN (bsc#1153098).\n- CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098).\n- CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-10-20T18:19:33Z","modified":"2026-02-04T02:55:24.542665Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:11425-1","title":"tcpdump-4.99.1-1.2 on GA media","description":"These are all security issues fixed in the tcpdump-4.99.1-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:56:33.613635Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2019:14191-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2017-12995: Fixed an infinite loop in the DNS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12893: Fixed a buffer over-read in the SMB/CIFS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12894: Fixed a buffer over-read in several protocol parsers that allowed remote DoS (bsc#1057247).\n- CVE-2017-12896: Fixed a buffer over-read in the ISAKMP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12897: Fixed a buffer over-read in the ISO CLNS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12898: Fixed a buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12899: Fixed a buffer over-read in the DECnet parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12900: Fixed a buffer over-read in the in several protocol parsers that allowed remote DoS (bsc#1057247).\n- CVE-2017-12901: Fixed a buffer over-read in the EIGRP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12902: Fixed a buffer over-read in the Zephyr parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12985: Fixed a buffer over-read in the IPv6 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12986: Fixed a buffer over-read in the IPv6 routing header parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12987: Fixed a buffer over-read in the 802.11 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12988: Fixed a buffer over-read in the telnet parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12991: Fixed a buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12992: Fixed a buffer over-read in the RIPng parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12993: Fixed a buffer over-read in the Juniper protocols parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12996: Fixed a buffer over-read in the PIMv2 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12998: Fixed a buffer over-read in the IS-IS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12999: Fixed a buffer over-read in the IS-IS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13001: Fixed a buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13002: Fixed a buffer over-read in the AODV parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13003: Fixed a buffer over-read in the LMP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13004: Fixed a buffer over-read in the Juniper protocols parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13005: Fixed a buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13006: Fixed a buffer over-read in the L2TP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13008: Fixed a buffer over-read in the IEEE 802.11 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13009: Fixed a buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13010: Fixed a buffer over-read in the BEEP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13012: Fixed a buffer over-read in the ICMP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13013: Fixed a buffer over-read in the ARP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13014: Fixed a buffer over-read in the White Board protocol parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13016: Fixed a buffer over-read in the ISO ES-IS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13017: Fixed a buffer over-read in the DHCPv6 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13018: Fixed a buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13019: Fixed a buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13021: Fixed a buffer over-read in the ICMPv6 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13022: Fixed a buffer over-read in the IP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13023: Fixed a buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13024: Fixed a buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13025: Fixed a buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13027: Fixed a buffer over-read in the LLDP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13028: Fixed a buffer over-read in the BOOTP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13029: Fixed a buffer over-read in the PPP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13030: Fixed a buffer over-read in the PIM parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13031: Fixed a buffer over-read in the IPv6 fragmentation header parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13032: Fixed a buffer over-read in the RADIUS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13034: Fixed a buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13035: Fixed a buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13036: Fixed a buffer over-read in the OSPFv3 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13037: Fixed a buffer over-read in the IP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13038: Fixed a buffer over-read in the PPP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13041: Fixed a buffer over-read in the ICMPv6 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13047: Fixed a buffer over-read in the ISO ES-IS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13048: Fixed a buffer over-read in the RSVP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13049: Fixed a buffer over-read in the Rx protocol parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13051: Fixed a buffer over-read in the RSVP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13053: Fixed a buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13055: Fixed a buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13687: Fixed a buffer over-read in the Cisco HDLC parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13688: Fixed a buffer over-read in the OLSR parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13689: Fixed a buffer over-read in the IKEv1 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13725: Fixed a buffer over-read in the IPv6 routing header parser that allowed remote DoS (bsc#1057247).\n- CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098).\n- CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098).\n- CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098).\n- CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098).\n- CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098).\n- CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098).\n- CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098).\n- CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098).\n- CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098).\n- CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098).\n- CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098).\n- CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098).\n- CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098).\n- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098).\n- CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \\MAILSLOT\\BROWSE and \\PIPE\\LANMAN (bsc#1153098).\n- CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098).\n- CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098).\n","status":"published","published":"2019-10-15T09:18:48Z","modified":"2026-02-04T03:33:59.754201Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2674-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098).\n- CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098).\n- CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098).\n- CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098).\n- CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098).\n- CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098).\n- CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098).\n- CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098).\n- CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098).\n- CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098).\n- CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098).\n- CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098).\n- CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098).\n- CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098).\n- CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098).\n- CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098).\n- CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098).\n- CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098).\n- CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098).\n- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098).\n- CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \\MAILSLOT\\BROWSE and \\PIPE\\LANMAN (bsc#1153098).\n- CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098).\n- CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098).\n","status":"published","published":"2019-10-15T14:53:30Z","modified":"2026-02-04T02:49:51.513216Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:3360-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size (bsc#1178466).\n\nThe previous update of tcpdump already fixed variuous Buffer overflow/overread vulnerabilities [bsc#1153098, bsc#1153332]\n\n- CVE-2017-16808 (AoE)\n- CVE-2018-14468 (FrameRelay)\n- CVE-2018-14469 (IKEv1)\n- CVE-2018-14470 (BABEL)\n- CVE-2018-14466 (AFS/RX)\n- CVE-2018-14461 (LDP)\n- CVE-2018-14462 (ICMP)\n- CVE-2018-14465 (RSVP)\n- CVE-2018-14464 (LMP)\n- CVE-2019-15166 (LMP)\n- CVE-2018-14880 (OSPF6)\n- CVE-2018-14882 (RPL)\n- CVE-2018-16227 (802.11)\n- CVE-2018-16229 (DCCP)\n- CVE-2018-14467 (BGP)\n- CVE-2018-14881 (BGP)\n- CVE-2018-16230 (BGP)\n- CVE-2018-16300 (BGP)\n- CVE-2018-14463 (VRRP)\n- CVE-2019-15167 (VRRP)\n- CVE-2018-14879 (tcpdump -V)\n- CVE-2018-16228 (HNCP) is a duplicate of the already fixed CVE-2019-1010220\n- CVE-2018-16301 (fixed in libpcap)\n- CVE-2018-16451 (SMB)\n- CVE-2018-16452 (SMB)\n- CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled)\n- CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled)\n","status":"published","published":"2020-11-17T12:41:00Z","modified":"2026-02-04T03:53:34.005689Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-4252-1","title":"tcpdump vulnerabilities","description":"Multiple security issues were discovered in tcpdump. A remote attacker\ncould use these issues to cause tcpdump to crash, resulting in a denial of\nservice, or possibly execute arbitrary code.\n","status":"published","published":"2020-01-27T15:12:07Z","modified":"2026-02-10T04:41:45Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4252-2","title":"tcpdump vulnerabilities","description":"USN-4252-1 fixed several vulnerabilities in tcpdump. This update provides\nthe corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n Multiple security issues were discovered in tcpdump. A remote attacker\n could use these issues to cause tcpdump to crash, resulting in a denial of\n service, or possibly execute arbitrary code.\n","status":"published","published":"2020-01-27T18:09:45Z","modified":"2026-02-10T04:41:45Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}