tcpdump: multiple overflow issues in protocol decoding
Published Jan 28, 2017
9.8
CRITICALCVSS 3.0
EPSS 3.20%
Description
The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print().
Affected products
No data.
No data.
Red Hat Enterprise Linux 7
tcpdump-14:4.9.0-5.el7
Fixed · RHSA-2017:1871
Red Hat Enterprise Linux 5
tcpdump
Will not fix
Red Hat Enterprise Linux 6
tcpdump
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 7 | tcpdump-14:4.9.0-5.el7 | Fixed | RHSA-2017:1871 |
| Red Hat Enterprise Linux 5 | tcpdump | Will not fix | n/a |
| Red Hat Enterprise Linux 6 | tcpdump | Will not fix | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Product Security has rated these issues as having Moderate security impact. These issues may be fixed in a future minor release of Red Hat Enterprise Linux 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.
Red Hat mitigation
When invoked with the "-w" option, to write raw packets to a pcap file (for forensic purposes or offline examination), tcpdump does not use the protocol decoding subsystem and is not affected by these flaws. Red Hat Product Security recommends that any unattended uses of tcpdump use this option to ensure uninterrupted packet capture.
References (11)
- http://www.debian.org/security/2017/dsa-3775 vendor-advisoryx_refsource_DEBIAN
- http://www.securityfocus.com/bid/95852 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037755 vdb-entryx_refsource_SECTRACK
- https://access.redhat.com/errata/RHSA-2017:1871 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2016-7933 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1419066 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-8782 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2016-7933
- https://security.gentoo.org/glsa/201702-30 vendor-advisoryx_refsource_GENTOO
- https://www.cve.org/CVERecord?id=CVE-2016-7933
- https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html x_refsource_CONFIRM
| Link | Providers | Tags |
|---|---|---|
| http://www.debian.org/security/2017/dsa-3775 | vendor-advisoryx_refsource_DEBIAN | |
| http://www.securityfocus.com/bid/95852 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| http://www.securitytracker.com/id/1037755 | vdb-entryx_refsource_SECTRACK | |
| https://access.redhat.com/errata/RHSA-2017:1871 | vendor-advisoryx_refsource_REDHAT | |
| https://access.redhat.com/security/cve/CVE-2016-7933 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1419066 | Issue Tracking | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-8782 | Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2016-7933 | ||
| https://security.gentoo.org/glsa/201702-30 | vendor-advisoryx_refsource_GENTOO | |
| https://www.cve.org/CVERecord?id=CVE-2016-7933 | ||
| https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html | x_refsource_CONFIRM |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
GitHub
No data