Out-of-bounds read in Tcpdump - CVE-2019-15167
Published: October 22, 2019
Vulnerability identifier: #VU22024
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-15167
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error within the VRRP parser A remote attacker can generate specially crafted data, trigger out-of-bounds read error and perform a denial of service (DoS) attack.
Affected software
Tcpdump
Amazon Linux AMI
IBM AIX
Slackware Linux
Opensuse
Fedora
IBM VIOS
tcpdump (Alpine package)
tcpdump
Amazon Linux AMI
IBM AIX
Slackware Linux
Opensuse
Fedora
IBM VIOS
tcpdump (Alpine package)
tcpdump
How to mitigate CVE-2019-15167
Install updates from vendor's website.
Tcpdump - update to 4.9.3
tcpdump (Alpine package) - update to 4.9.3-r0
tcpdump - update to 4.9.2-4.24
tcpdump - addressed in versions 4.9.3-1.fc29, 4.9.3-1.fc30, 4.9.3-1.fc31
tcpdump (Alpine package) - update to 4.9.3-r0
tcpdump - update to 4.9.2-4.24
tcpdump - addressed in versions 4.9.3-1.fc29, 4.9.3-1.fc30, 4.9.3-1.fc31
External References
Related Security Bulletins
- OpenSUSE Linux update for tcpdump
- OpenSUSE Linux update for tcpdump
- Multiple vulnerabilities in Tcpdump
- Slackware Linux update for tcpdump
- IBM AIX update for tcpdump
- Out-of-bounds read in tcpdump (Alpine package)
- Amazon Linux AMI update for tcpdump
- Fedora 31 update for tcpdump
- Fedora 30 update for tcpdump
- Fedora 29 update for tcpdump