Buffer overflow in Tcpdump - CVE-2019-15166

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU22023

Buffer overflow in Tcpdump - CVE-2019-15166

Published: October 22, 2019


Vulnerability identifier: #VU22023
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-15166
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the lmp_print_data_link_subobjs() function in print-lmp.c. A remote attacker can create a specially crafted LMP data, trigger memory corruption and perform a denial of service (DoS) attack.


Affected software

Tcpdump
IBM VIOS
OpenShift Data Foundation (formerly OpenShift Container Storage)
tcpdump (Debian package)
tcpdump (Alpine package)
tcpdump (Red Hat package)
tcpdump
IBM AIX
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Oracle Solaris
Slackware Linux
Opensuse
Fedora

How to mitigate CVE-2019-15166

Install updates from vendor's website.

Tcpdump - update to 4.9.3
tcpdump (Debian package) - addressed in versions 4.9.3-1~deb9u1, 4.9.3-1~deb10u1
tcpdump (Alpine package) - update to 4.9.3-r0
tcpdump (Red Hat package) - update to 4.9.3-1.el8
tcpdump - addressed in versions 4.9.3-1.fc29, 4.9.3-1.fc30, 4.9.3-1.fc31

External References

Related Security Bulletins