{"id":"CVE-2020-8037","aliases":["ALPINE-CVE-2020-8037","ALSA-2021:4236","AZL-6905","BELL-CVE-2020-8037","DEBIAN-CVE-2020-8037","DLA-2444-1","EUVD-2020-28949","GHSA-qggh-75q9-j3rf","MGASA-2020-0430","RHSA-2021:4236","RLSA-2021:4236","SUSE-SU-2020:3358-1","SUSE-SU-2020:3360-1","UBUNTU-CVE-2020-8037","USN-5331-1","USN-5331-2","openSUSE-SU-2020:1983-1","openSUSE-SU-2020:1986-1","openSUSE-SU-2024:11425-1"],"status":"published","title":"ppp decapsulator can be convinced to allocate a large amount of memory","description":"The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03109,"percentile":0.87881,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2020-11-04T17:55:21Z","modified":"2026-10-29T11:01:09Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"tcpdump","fixed_in":["4.9.3-r1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"tcpdump","fixed_in":["14:4.9.3-2.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"tcpdump","fixed_in":["4.9.3-3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"tcpdump","fixed_in":["4.9.3-7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tcpdump","fixed_in":["4.9.3-7"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tcpdump","fixed_in":["4.9.3-7"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"tcpdump","fixed_in":["4.9.3-1~deb9u2"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"tcpdump","fixed_in":["4.9.3-1.1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tcpdump","fixed_in":["14:4.9.3-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tcpdump-debuginfo","fixed_in":["14:4.9.3-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tcpdump-debugsource","fixed_in":["14:4.9.3-2.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"tcpdump","fixed_in":["4:4.9.3-2.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"tcpdump","fixed_in":["4.9.2-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"tcpdump","fixed_in":["4.9.2-3.12.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tcpdump","fixed_in":["4.9.3-0ubuntu0.16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"tcpdump","fixed_in":["4.9.3-0ubuntu0.18.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"tcpdump","fixed_in":["4.9.3-4ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"tcpdump","fixed_in":["4.9.2-lp151.4.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"tcpdump","fixed_in":["4.9.2-lp152.7.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-2.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-7"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-7"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-7"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1~deb9u2"}]}],"versions":["4.9.0-2","4.9.0-3","4.9.1-1","4.9.1-2","4.9.1-3","4.9.2-1","4.9.2-1~deb7u1","4.9.2-1~deb8u1","4.9.2-1~deb9u1","4.9.2-2","4.9.2-3","4.9.3-1~deb8u1","4.9.3-1~deb9u1","4.9.3~git20190901-1","4.9.3~git20190901-2"]},{"source":"osv","ecosystem":"Mageia:7","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1.1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tcpdump-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.3-2.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.3-2.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.17.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.17.1"}]}],"bundled":29},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.0-1ubuntu1","4.5.1-2ubuntu1","4.5.1-2ubuntu1.1","4.5.1-2ubuntu1.2","4.9.0-1ubuntu1~ubuntu14.04.1","4.9.2-0ubuntu0.14.04.1","4.9.3-0ubuntu0.14.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.16.04.1+esm1"}]}],"versions":["4.7.4-1ubuntu1","4.9.0-1ubuntu1~ubuntu16.04.1","4.9.2-0ubuntu0.16.04.1","4.9.3-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.18.04.2"}]}],"versions":["4.9.2-1","4.9.2-2","4.9.2-2build1","4.9.2-2ubuntu1","4.9.2-3","4.9.3-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-4ubuntu0.1"}]}],"versions":["4.9.3-2","4.9.3-3","4.9.3-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.16.04.1+esm1"}]}],"versions":["4.7.4-1ubuntu1","4.9.0-1ubuntu1~ubuntu16.04.1","4.9.2-0ubuntu0.16.04.1","4.9.3-0ubuntu0.16.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.18.04.2"}]}],"versions":["4.9.2-1","4.9.2-2","4.9.2-2build1","4.9.2-2ubuntu1","4.9.2-3","4.9.3-0ubuntu0.18.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-4ubuntu0.1"}]}],"versions":["4.9.3-2","4.9.3-3","4.9.3-4"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-lp151.4.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-lp152.7.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.99.1-1.2"}]}],"bundled":161}],"products":[{"vendor":"apple","product":"mac_os_x"},{"vendor":"apple","product":"macos"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"tcpdump","product":"tcpdump"},{"vendor":"the tcpdump group","product":"tcpdump"}],"references":[{"url":"https://github.com/the-tcpdump-group/tcpdump/commit/32027e199368dad9508965aae8cd8de5b6ab5231","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/11/msg00018.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWDBONZVLC6BAOR2KM376DJCM4H3FERV/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2MX34MJIUJQGL6CMEPLTKFOOOC3CJ4Z/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2021/Apr/51","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT212325","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT212326","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT212327","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8037","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F2MX34MJIUJQGL6CMEPLTKFOOOC3CJ4Z/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LWDBONZVLC6BAOR2KM376DJCM4H3FERV/"},{"url":"https://github.com/advisories/GHSA-qggh-75q9-j3rf"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-8037","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2020-8037","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-8037","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-8037","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0430.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27595","tags":["report"]},{"url":"https://www.debian.org/lts/security/2020/dla-2444","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4236","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1860216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895080","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4236.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8037","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8037","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4236","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203358-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1178466","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8037","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203360-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1153098","tags":["report"]},{"url":"https://bugzilla.suse.com/1153332","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1010220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15167","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-8037","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5331-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5331-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-16301","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LS4ETM3JSH2SWUOYCYLRBRPQPCJ7QXGX/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QLS7QAB5MKRGXWLJ5MLIV2TPU4TWVXE5/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19519","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-8037","title":"ppp decapsulator can be convinced to allocate a large amount of memory","description":"The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.","status":"published","published":"2020-11-04T17:55:21.657Z","modified":"2024-09-16T20:27:55.571Z","updated_at":"2026-11-02T14:35:50.88562Z"}],"euvd":[{"id":"EUVD-2020-28949","description":"The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.","status":"published","published":"2020-11-04T17:55:21Z","modified":"2024-09-16T20:27:55Z","updated_at":"2026-11-03T00:55:13.588552Z"}],"ghsa":[{"id":"GHSA-qggh-75q9-j3rf","title":"The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.","description":"The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.","status":"published","published":"2022-05-24T17:33:10Z","modified":"2023-01-29T05:04:35Z","cwes":["CWE-770"],"updated_at":"2026-11-02T14:45:35.654176Z"}],"nvd":[{"id":"CVE-2020-8037","description":"The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.","status":"published","published":"2020-11-04T18:15:20.843Z","modified":"2026-06-17T03:25:50.133Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:06:21.80969Z"}],"osv":[{"id":"ALPINE-CVE-2020-8037","description":"The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.","status":"published","published":"2020-11-04T18:15:20.843Z","modified":"2026-10-26T11:17:55.181697718Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"AZL-6905","title":"CVE-2020-8037 affecting package tcpdump for versions less than 4.9.3-3","description":"The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.","status":"published","published":"2020-11-04T18:15:20Z","modified":"2026-04-21T04:38:32.956999Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"BELL-CVE-2020-8037","title":"CVE-2020-8037 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:43.950287Z","modified":"2026-01-26T09:45:58.640425Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-8037","description":"The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.","status":"published","published":"2020-11-04T18:15:20.843Z","modified":"2026-10-24T14:51:03.005788386Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:17.663289Z"},{"id":"DEBIAN-CVE-2020-8037","description":"The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.","status":"published","published":"2020-11-04T18:15:20.843Z","modified":"2026-10-26T12:02:33.844280517Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"RHSA-2021:4236","title":"Red Hat Security Advisory: tcpdump security and bug fix update","status":"published","published":"2024-09-16T06:00:58Z","modified":"2025-11-22T12:26:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:4236","title":"Low: tcpdump security and bug fix update","description":"The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nSecurity Fix(es):\n\n* tcpdump: ppp decapsulator can be convinced to allocate a large amount of memory (CVE-2020-8037)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:48:42Z","modified":"2026-02-04T20:45:08.078139Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-8037","description":"The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.","status":"published","published":"2020-11-04T18:15:00Z","modified":"2026-02-04T03:14:09.21898Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"ALSA-2021:4236","title":"Low: tcpdump security and bug fix update","description":"The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nSecurity Fix(es):\n\n* tcpdump: ppp decapsulator can be convinced to allocate a large amount of memory (CVE-2020-8037)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:48:42Z","modified":"2026-10-29T11:01:09.353481051Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-2444-1","title":"tcpdump - security update","status":"published","published":"2020-11-10T00:00:00Z","modified":"2026-03-09T01:19:01.666249Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2020-0430","title":"Updated tcpdump package fixes a security vulnerability","description":"The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large\namount of memory. (CVE-2020-8037)\n","status":"published","published":"2020-11-21T12:21:00Z","modified":"2026-04-16T04:44:21.532509758Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2020:1983-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size (bsc#1178466).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-11-20T17:24:10Z","modified":"2026-02-04T03:54:27.493866Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1986-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size (bsc#1178466).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-11-21T05:23:29Z","modified":"2026-02-04T02:39:57.814677Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:11425-1","title":"tcpdump-4.99.1-1.2 on GA media","description":"These are all security issues fixed in the tcpdump-4.99.1-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:56:33.613635Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2020:3358-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size (bsc#1178466).\n","status":"published","published":"2020-11-17T12:17:22Z","modified":"2026-02-04T04:35:22.378347Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3360-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size (bsc#1178466).\n\nThe previous update of tcpdump already fixed variuous Buffer overflow/overread vulnerabilities [bsc#1153098, bsc#1153332]\n\n- CVE-2017-16808 (AoE)\n- CVE-2018-14468 (FrameRelay)\n- CVE-2018-14469 (IKEv1)\n- CVE-2018-14470 (BABEL)\n- CVE-2018-14466 (AFS/RX)\n- CVE-2018-14461 (LDP)\n- CVE-2018-14462 (ICMP)\n- CVE-2018-14465 (RSVP)\n- CVE-2018-14464 (LMP)\n- CVE-2019-15166 (LMP)\n- CVE-2018-14880 (OSPF6)\n- CVE-2018-14882 (RPL)\n- CVE-2018-16227 (802.11)\n- CVE-2018-16229 (DCCP)\n- CVE-2018-14467 (BGP)\n- CVE-2018-14881 (BGP)\n- CVE-2018-16230 (BGP)\n- CVE-2018-16300 (BGP)\n- CVE-2018-14463 (VRRP)\n- CVE-2019-15167 (VRRP)\n- CVE-2018-14879 (tcpdump -V)\n- CVE-2018-16228 (HNCP) is a duplicate of the already fixed CVE-2019-1010220\n- CVE-2018-16301 (fixed in libpcap)\n- CVE-2018-16451 (SMB)\n- CVE-2018-16452 (SMB)\n- CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled)\n- CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled)\n","status":"published","published":"2020-11-17T12:41:00Z","modified":"2026-02-04T03:53:34.005689Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-5331-1","title":"tcpdump vulnerabilities","description":"It was discovered that tcpdump incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a denial of service,\nor possibly execute arbitrary code. (CVE-2018-16301)\n\nIt was discovered that tcpdump incorrectly handled certain captured data.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2020-8037)\n","status":"published","published":"2022-03-16T12:53:13Z","modified":"2026-06-25T13:31:03.486090038Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5331-2","title":"tcpdump vulnerabilities","description":"USN-5331-1 fixed several vulnerabilities in tcpdump. This update provides\nthe corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. \n\nOriginal advisory details:\n It was discovered that tcpdump incorrectly handled certain inputs.\n An attacker could possibly use this issue to cause a denial of service,\n or possibly execute arbitrary code. (CVE-2018-16301)\n \n It was discovered that tcpdump incorrectly handled certain captured data.\n An attacker could possibly use this issue to cause a denial of service.\n (CVE-2020-8037)\n","status":"published","published":"2022-04-11T07:44:40Z","modified":"2026-04-27T16:00:01.393906Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}