Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2017-11541
Vulnerability from cvelistv5
Published
2017-07-23 03:00
Modified
2024-08-05 18:12
Severity ?
EPSS score ?
Summary
tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-05T18:12:40.221Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "GLSA-201709-23", tags: [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred", ], url: "https://security.gentoo.org/glsa/201709-23", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://support.apple.com/HT208221", }, { name: "DSA-3971", tags: [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred", ], url: "http://www.debian.org/security/2017/dsa-3971", }, { name: "1039307", tags: [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred", ], url: "http://www.securitytracker.com/id/1039307", }, { name: "99941", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/99941", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print", }, { name: "RHEA-2018:0705", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2017-07-22T00:00:00", descriptions: [ { lang: "en", value: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2018-05-16T09:57:01", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { name: "GLSA-201709-23", tags: [ "vendor-advisory", "x_refsource_GENTOO", ], url: "https://security.gentoo.org/glsa/201709-23", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://support.apple.com/HT208221", }, { name: "DSA-3971", tags: [ "vendor-advisory", "x_refsource_DEBIAN", ], url: "http://www.debian.org/security/2017/dsa-3971", }, { name: "1039307", tags: [ "vdb-entry", "x_refsource_SECTRACK", ], url: "http://www.securitytracker.com/id/1039307", }, { name: "99941", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/99941", }, { tags: [ "x_refsource_MISC", ], url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print", }, { name: "RHEA-2018:0705", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2017-11541", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "GLSA-201709-23", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201709-23", }, { name: "https://support.apple.com/HT208221", refsource: "CONFIRM", url: "https://support.apple.com/HT208221", }, { name: "DSA-3971", refsource: "DEBIAN", url: "http://www.debian.org/security/2017/dsa-3971", }, { name: "1039307", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1039307", }, { name: "99941", refsource: "BID", url: "http://www.securityfocus.com/bid/99941", }, { name: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print", refsource: "MISC", url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print", }, { name: "RHEA-2018:0705", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2017-11541", datePublished: "2017-07-23T03:00:00", dateReserved: "2017-07-22T00:00:00", dateUpdated: "2024-08-05T18:12:40.221Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { nvd: "{\"cve\":{\"id\":\"CVE-2017-11541\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2017-07-23T03:29:00.813\",\"lastModified\":\"2024-11-21T03:07:58.890\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.\"},{\"lang\":\"es\",\"value\":\"tcpdump 4.9.0 presenta una sobrelectura de búfer basada en memoria dinámica (heap) en la función lldp_print en print-lldp.c. Esto está relacionado con to util-print.c.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":true,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6BE599F-A3FF-402C-A2C8-119B5E81CE8C\"}]}]}],\"references\":[{\"url\":\"http://www.debian.org/security/2017/dsa-3971\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/99941\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039307\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://access.redhat.com/errata/RHEA-2018:0705\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201709-23\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://support.apple.com/HT208221\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2017/dsa-3971\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/99941\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039307\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHEA-2018:0705\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201709-23\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/HT208221\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}", }, }
ghsa-q7cx-f48p-82m3
Vulnerability from github
Published
2022-05-13 01:42
Modified
2022-05-13 01:42
Severity ?
Details
tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
{ affected: [], aliases: [ "CVE-2017-11541", ], database_specific: { cwe_ids: [ "CWE-125", ], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2017-07-23T03:29:00Z", severity: "CRITICAL", }, details: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", id: "GHSA-q7cx-f48p-82m3", modified: "2022-05-13T01:42:24Z", published: "2022-05-13T01:42:24Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11541", }, { type: "WEB", url: "https://access.redhat.com/errata/RHEA-2018:0705", }, { type: "WEB", url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print", }, { type: "WEB", url: "https://security.gentoo.org/glsa/201709-23", }, { type: "WEB", url: "https://support.apple.com/HT208221", }, { type: "WEB", url: "http://www.debian.org/security/2017/dsa-3971", }, { type: "WEB", url: "http://www.securityfocus.com/bid/99941", }, { type: "WEB", url: "http://www.securitytracker.com/id/1039307", }, ], schema_version: "1.4.0", severity: [ { score: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", type: "CVSS_V3", }, ], }
rhea-2018_0705
Vulnerability from csaf_redhat
Published
2018-04-10 00:00
Modified
2024-11-22 11:30
Summary
Red Hat Enhancement Advisory: tcpdump bug fix and enhancement update
Notes
Topic
An update for tcpdump is now available for Red Hat Enterprise Linux 7.
Details
The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.
Users of tcpdump are advised to upgrade to these updated packages.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for tcpdump is now available for Red Hat Enterprise Linux 7.", title: "Topic", }, { category: "general", text: "The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.\n\nUsers of tcpdump are advised to upgrade to these updated packages.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHEA-2018:0705", url: "https://access.redhat.com/errata/RHEA-2018:0705", }, { category: "external", summary: "https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html", url: "https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html", }, { category: "external", summary: "1464390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1464390", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhea-2018_0705.json", }, ], title: "Red Hat Enhancement Advisory: tcpdump bug fix and enhancement update", tracking: { current_release_date: "2024-11-22T11:30:03+00:00", generator: { date: "2024-11-22T11:30:03+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHEA-2018:0705", initial_release_date: "2018-04-10T00:00:00+00:00", revision_history: [ { date: "2018-04-10T00:00:00+00:00", number: "1", summary: "Initial version", }, { date: "2018-04-10T11:58:24+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T11:30:03+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ComputeNode (v. 7)", product: { name: "Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::computenode", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 7)", product: { name: "Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product: { name: "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.x86_64", product: { name: "tcpdump-14:4.9.2-3.el7.x86_64", product_id: "tcpdump-14:4.9.2-3.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=x86_64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", product: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", product_id: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=x86_64&epoch=14", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.src", product: { name: "tcpdump-14:4.9.2-3.el7.src", product_id: "tcpdump-14:4.9.2-3.el7.src", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=src&epoch=14", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.s390x", product: { name: "tcpdump-14:4.9.2-3.el7.s390x", product_id: "tcpdump-14:4.9.2-3.el7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=s390x&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", product: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", product_id: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=s390x&epoch=14", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.ppc64", product: { name: "tcpdump-14:4.9.2-3.el7.ppc64", product_id: "tcpdump-14:4.9.2-3.el7.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=ppc64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", product: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", product_id: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=ppc64&epoch=14", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.ppc64le", product: { name: "tcpdump-14:4.9.2-3.el7.ppc64le", product_id: "tcpdump-14:4.9.2-3.el7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=ppc64le&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", product: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", product_id: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=ppc64le&epoch=14", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.aarch64", product: { name: "tcpdump-14:4.9.2-3.el7.aarch64", product_id: "tcpdump-14:4.9.2-3.el7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=aarch64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", product: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", product_id: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=aarch64&epoch=14", }, }, }, ], category: "architecture", name: "aarch64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", }, product_reference: "tcpdump-14:4.9.2-3.el7.src", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", }, product_reference: "tcpdump-14:4.9.2-3.el7.src", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", }, product_reference: "tcpdump-14:4.9.2-3.el7.src", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", }, product_reference: "tcpdump-14:4.9.2-3.el7.src", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", }, product_reference: "tcpdump-14:4.9.2-3.el7.src", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Workstation-7.5", }, ], }, vulnerabilities: [ { cve: "CVE-2017-11108", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2017-07-07T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1472878", }, ], notes: [ { category: "description", text: "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Heap buffer overflow in the EXTRACT_16BITS function", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-11108", }, { category: "external", summary: "RHBZ#1472878", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1472878", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-11108", url: "https://www.cve.org/CVERecord?id=CVE-2017-11108", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-11108", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11108", }, ], release_date: "2017-07-07T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "LOW", baseScore: 3.3, baseSeverity: "LOW", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Heap buffer overflow in the EXTRACT_16BITS function", }, { cve: "CVE-2017-11541", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-07-23T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1475352", }, ], notes: [ { category: "description", text: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: heap-based buffer over-read in the lldp_print", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-11541", }, { category: "external", summary: "RHBZ#1475352", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1475352", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-11541", url: "https://www.cve.org/CVERecord?id=CVE-2017-11541", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-11541", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11541", }, ], release_date: "2017-07-18T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: heap-based buffer over-read in the lldp_print", }, { cve: "CVE-2017-11542", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-07-23T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1475355", }, ], notes: [ { category: "description", text: "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: heap-based buffer over-read in the pimv1_print", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-11542", }, { category: "external", summary: "RHBZ#1475355", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1475355", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-11542", url: "https://www.cve.org/CVERecord?id=CVE-2017-11542", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-11542", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11542", }, ], release_date: "2017-07-18T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: heap-based buffer over-read in the pimv1_print", }, { cve: "CVE-2017-11543", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2017-07-23T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1475358", }, ], notes: [ { category: "description", text: "A vulnerability was discovered in tcpdump's handling of LINKTYPE_SLIP pcap files. An attacker could craft a malicious pcap file that would cause tcpdump to crash when attempting to print a summary of packet data within the file.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: buffer overflow in the sliplink_print function", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-11543", }, { category: "external", summary: "RHBZ#1475358", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1475358", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-11543", url: "https://www.cve.org/CVERecord?id=CVE-2017-11543", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-11543", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11543", }, ], release_date: "2017-07-18T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 5.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: buffer overflow in the sliplink_print function", }, { cve: "CVE-2017-11544", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-07-23T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1475359", }, ], notes: [ { category: "description", text: "A vulnerability was discovered in tcpdump's handling of LINKTYPE_SLIP pcap files. An attacker could craft a malicious pcap file that would cause tcpdump to crash when attempting to print a summary of packet data within the file.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Segmentation Violation in the compressed_sl_print", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-11544", }, { category: "external", summary: "RHBZ#1475359", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1475359", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-11544", url: "https://www.cve.org/CVERecord?id=CVE-2017-11544", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-11544", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11544", }, ], release_date: "2017-07-18T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 5.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Segmentation Violation in the compressed_sl_print", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12893", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490539", }, ], notes: [ { category: "description", text: "The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12893", }, { category: "external", summary: "RHBZ#1490539", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490539", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12893", url: "https://www.cve.org/CVERecord?id=CVE-2017-12893", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12893", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12893", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12894", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490540", }, ], notes: [ { category: "description", text: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12894", }, { category: "external", summary: "RHBZ#1490540", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490540", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12894", url: "https://www.cve.org/CVERecord?id=CVE-2017-12894", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12894", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12894", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12895", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490541", }, ], notes: [ { category: "description", text: "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12895", }, { category: "external", summary: "RHBZ#1490541", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490541", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12895", url: "https://www.cve.org/CVERecord?id=CVE-2017-12895", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12895", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12895", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12896", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490543", }, ], notes: [ { category: "description", text: "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12896", }, { category: "external", summary: "RHBZ#1490543", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490543", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12896", url: "https://www.cve.org/CVERecord?id=CVE-2017-12896", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12896", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12896", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12897", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490545", }, ], notes: [ { category: "description", text: "The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12897", }, { category: "external", summary: "RHBZ#1490545", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490545", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12897", url: "https://www.cve.org/CVERecord?id=CVE-2017-12897", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12897", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12897", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12898", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490546", }, ], notes: [ { category: "description", text: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12898", }, { category: "external", summary: "RHBZ#1490546", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490546", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12898", url: "https://www.cve.org/CVERecord?id=CVE-2017-12898", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12898", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12898", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12899", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490547", }, ], notes: [ { category: "description", text: "The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12899", }, { category: "external", summary: "RHBZ#1490547", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490547", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12899", url: "https://www.cve.org/CVERecord?id=CVE-2017-12899", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12899", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12899", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12900", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490548", }, ], notes: [ { category: "description", text: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in util-print.c:tok2strbuf()", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12900", }, { category: "external", summary: "RHBZ#1490548", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490548", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12900", url: "https://www.cve.org/CVERecord?id=CVE-2017-12900", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12900", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12900", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in util-print.c:tok2strbuf()", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12901", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490549", }, ], notes: [ { category: "description", text: "The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12901", }, { category: "external", summary: "RHBZ#1490549", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490549", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12901", url: "https://www.cve.org/CVERecord?id=CVE-2017-12901", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12901", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12901", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12902", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490550", }, ], notes: [ { category: "description", text: "The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12902", }, { category: "external", summary: "RHBZ#1490550", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490550", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12902", url: "https://www.cve.org/CVERecord?id=CVE-2017-12902", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12902", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12902", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12985", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490551", }, ], notes: [ { category: "description", text: "The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12985", }, { category: "external", summary: "RHBZ#1490551", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490551", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12985", url: "https://www.cve.org/CVERecord?id=CVE-2017-12985", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12985", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12985", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12986", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490552", }, ], notes: [ { category: "description", text: "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12986", }, { category: "external", summary: "RHBZ#1490552", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490552", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12986", url: "https://www.cve.org/CVERecord?id=CVE-2017-12986", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12986", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12986", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12987", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490553", }, ], notes: [ { category: "description", text: "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12987", }, { category: "external", summary: "RHBZ#1490553", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490553", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12987", url: "https://www.cve.org/CVERecord?id=CVE-2017-12987", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12987", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12987", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12988", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490554", }, ], notes: [ { category: "description", text: "The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12988", }, { category: "external", summary: "RHBZ#1490554", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490554", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12988", url: "https://www.cve.org/CVERecord?id=CVE-2017-12988", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12988", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12988", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12989", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490555", }, ], notes: [ { category: "description", text: "The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12989", }, { category: "external", summary: "RHBZ#1490555", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490555", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12989", url: "https://www.cve.org/CVERecord?id=CVE-2017-12989", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12989", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12989", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12990", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490556", }, ], notes: [ { category: "description", text: "The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12990", }, { category: "external", summary: "RHBZ#1490556", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490556", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12990", url: "https://www.cve.org/CVERecord?id=CVE-2017-12990", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12990", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12990", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12991", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490557", }, ], notes: [ { category: "description", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12991", }, { category: "external", summary: "RHBZ#1490557", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490557", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12991", url: "https://www.cve.org/CVERecord?id=CVE-2017-12991", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12991", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12991", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12992", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490558", }, ], notes: [ { category: "description", text: "The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12992", }, { category: "external", summary: "RHBZ#1490558", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490558", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12992", url: "https://www.cve.org/CVERecord?id=CVE-2017-12992", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12992", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12992", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12993", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490559", }, ], notes: [ { category: "description", text: "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12993", }, { category: "external", summary: "RHBZ#1490559", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490559", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12993", url: "https://www.cve.org/CVERecord?id=CVE-2017-12993", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12993", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12993", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12994", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490560", }, ], notes: [ { category: "description", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12994", }, { category: "external", summary: "RHBZ#1490560", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490560", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12994", url: "https://www.cve.org/CVERecord?id=CVE-2017-12994", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12994", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12994", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12995", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490561", }, ], notes: [ { category: "description", text: "The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12995", }, { category: "external", summary: "RHBZ#1490561", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490561", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12995", url: "https://www.cve.org/CVERecord?id=CVE-2017-12995", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12995", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12995", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12996", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490562", }, ], notes: [ { category: "description", text: "The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12996", }, { category: "external", summary: "RHBZ#1490562", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490562", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12996", url: "https://www.cve.org/CVERecord?id=CVE-2017-12996", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12996", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12996", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12997", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490564", }, ], notes: [ { category: "description", text: "The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12997", }, { category: "external", summary: "RHBZ#1490564", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490564", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12997", url: "https://www.cve.org/CVERecord?id=CVE-2017-12997", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12997", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12997", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12998", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490565", }, ], notes: [ { category: "description", text: "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12998", }, { category: "external", summary: "RHBZ#1490565", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490565", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12998", url: "https://www.cve.org/CVERecord?id=CVE-2017-12998", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12998", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12998", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12999", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490566", }, ], notes: [ { category: "description", text: "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12999", }, { category: "external", summary: "RHBZ#1490566", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490566", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12999", url: "https://www.cve.org/CVERecord?id=CVE-2017-12999", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12999", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12999", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13000", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490567", }, ], notes: [ { category: "description", text: "The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13000", }, { category: "external", summary: "RHBZ#1490567", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490567", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13000", url: "https://www.cve.org/CVERecord?id=CVE-2017-13000", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13000", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13000", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13001", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490568", }, ], notes: [ { category: "description", text: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13001", }, { category: "external", summary: "RHBZ#1490568", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490568", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13001", url: "https://www.cve.org/CVERecord?id=CVE-2017-13001", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13001", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13001", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13002", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490569", }, ], notes: [ { category: "description", text: "The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13002", }, { category: "external", summary: "RHBZ#1490569", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490569", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13002", url: "https://www.cve.org/CVERecord?id=CVE-2017-13002", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13002", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13002", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13003", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490570", }, ], notes: [ { category: "description", text: "The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13003", }, { category: "external", summary: "RHBZ#1490570", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490570", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13003", url: "https://www.cve.org/CVERecord?id=CVE-2017-13003", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13003", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13003", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13004", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490571", }, ], notes: [ { category: "description", text: "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13004", }, { category: "external", summary: "RHBZ#1490571", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490571", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13004", url: "https://www.cve.org/CVERecord?id=CVE-2017-13004", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13004", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13004", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13005", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490572", }, ], notes: [ { category: "description", text: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13005", }, { category: "external", summary: "RHBZ#1490572", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490572", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13005", url: "https://www.cve.org/CVERecord?id=CVE-2017-13005", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13005", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13005", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13006", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490573", }, ], notes: [ { category: "description", text: "The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13006", }, { category: "external", summary: "RHBZ#1490573", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490573", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13006", url: "https://www.cve.org/CVERecord?id=CVE-2017-13006", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13006", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13006", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13007", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490574", }, ], notes: [ { category: "description", text: "The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13007", }, { category: "external", summary: "RHBZ#1490574", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490574", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13007", url: "https://www.cve.org/CVERecord?id=CVE-2017-13007", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13007", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13007", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13008", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490575", }, ], notes: [ { category: "description", text: "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13008", }, { category: "external", summary: "RHBZ#1490575", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490575", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13008", url: "https://www.cve.org/CVERecord?id=CVE-2017-13008", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13008", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13008", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13009", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490576", }, ], notes: [ { category: "description", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13009", }, { category: "external", summary: "RHBZ#1490576", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490576", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13009", url: "https://www.cve.org/CVERecord?id=CVE-2017-13009", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13009", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13009", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13010", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490577", }, ], notes: [ { category: "description", text: "The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13010", }, { category: "external", summary: "RHBZ#1490577", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490577", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13010", url: "https://www.cve.org/CVERecord?id=CVE-2017-13010", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13010", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13010", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13011", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490578", }, ], notes: [ { category: "description", text: "A vulnerability was found in tcpdump's verbose printing of packet data. A crafted pcap file or specially crafted network traffic could cause tcpdump to write out of bounds in the BSS segment, potentially causing tcpdump to display truncated or incorrectly decoded fields or crash with a segmentation violation. This does not affect tcpdump when used with the -w option to save a pcap file.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer overflow in util-print.c:bittok2str_internal()", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13011", }, { category: "external", summary: "RHBZ#1490578", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490578", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13011", url: "https://www.cve.org/CVERecord?id=CVE-2017-13011", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13011", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13011", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: Buffer overflow in util-print.c:bittok2str_internal()", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13012", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490579", }, ], notes: [ { category: "description", text: "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13012", }, { category: "external", summary: "RHBZ#1490579", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490579", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13012", url: "https://www.cve.org/CVERecord?id=CVE-2017-13012", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13012", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13012", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13013", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490580", }, ], notes: [ { category: "description", text: "The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13013", }, { category: "external", summary: "RHBZ#1490580", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490580", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13013", url: "https://www.cve.org/CVERecord?id=CVE-2017-13013", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13013", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13013", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13014", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490581", }, ], notes: [ { category: "description", text: "The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13014", }, { category: "external", summary: "RHBZ#1490581", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490581", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13014", url: "https://www.cve.org/CVERecord?id=CVE-2017-13014", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13014", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13014", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13015", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490582", }, ], notes: [ { category: "description", text: "The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13015", }, { category: "external", summary: "RHBZ#1490582", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490582", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13015", url: "https://www.cve.org/CVERecord?id=CVE-2017-13015", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13015", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13015", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13016", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490583", }, ], notes: [ { category: "description", text: "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13016", }, { category: "external", summary: "RHBZ#1490583", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490583", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13016", url: "https://www.cve.org/CVERecord?id=CVE-2017-13016", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13016", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13016", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13017", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490584", }, ], notes: [ { category: "description", text: "The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13017", }, { category: "external", summary: "RHBZ#1490584", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490584", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13017", url: "https://www.cve.org/CVERecord?id=CVE-2017-13017", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13017", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13017", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13018", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490585", }, ], notes: [ { category: "description", text: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13018", }, { category: "external", summary: "RHBZ#1490585", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490585", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13018", url: "https://www.cve.org/CVERecord?id=CVE-2017-13018", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13018", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13018", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13019", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490586", }, ], notes: [ { category: "description", text: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13019", }, { category: "external", summary: "RHBZ#1490586", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490586", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13019", url: "https://www.cve.org/CVERecord?id=CVE-2017-13019", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13019", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13019", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13020", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490587", }, ], notes: [ { category: "description", text: "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13020", }, { category: "external", summary: "RHBZ#1490587", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490587", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13020", url: "https://www.cve.org/CVERecord?id=CVE-2017-13020", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13020", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13020", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13021", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490588", }, ], notes: [ { category: "description", text: "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13021", }, { category: "external", summary: "RHBZ#1490588", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490588", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13021", url: "https://www.cve.org/CVERecord?id=CVE-2017-13021", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13021", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13021", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13022", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490589", }, ], notes: [ { category: "description", text: "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13022", }, { category: "external", summary: "RHBZ#1490589", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490589", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13022", url: "https://www.cve.org/CVERecord?id=CVE-2017-13022", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13022", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13022", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13023", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490590", }, ], notes: [ { category: "description", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13023", }, { category: "external", summary: "RHBZ#1490590", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490590", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13023", url: "https://www.cve.org/CVERecord?id=CVE-2017-13023", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13023", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13023", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13024", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490591", }, ], notes: [ { category: "description", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13024", }, { category: "external", summary: "RHBZ#1490591", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490591", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13024", url: "https://www.cve.org/CVERecord?id=CVE-2017-13024", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13024", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13024", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13025", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490592", }, ], notes: [ { category: "description", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13025", }, { category: "external", summary: "RHBZ#1490592", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490592", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13025", url: "https://www.cve.org/CVERecord?id=CVE-2017-13025", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13025", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13025", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13026", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490593", }, ], notes: [ { category: "description", text: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13026", }, { category: "external", summary: "RHBZ#1490593", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490593", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13026", url: "https://www.cve.org/CVERecord?id=CVE-2017-13026", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13026", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13026", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13027", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490594", }, ], notes: [ { category: "description", text: "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13027", }, { category: "external", summary: "RHBZ#1490594", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490594", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13027", url: "https://www.cve.org/CVERecord?id=CVE-2017-13027", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13027", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13027", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13028", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490595", }, ], notes: [ { category: "description", text: "The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13028", }, { category: "external", summary: "RHBZ#1490595", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490595", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13028", url: "https://www.cve.org/CVERecord?id=CVE-2017-13028", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13028", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13028", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13029", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490596", }, ], notes: [ { category: "description", text: "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13029", }, { category: "external", summary: "RHBZ#1490596", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490596", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13029", url: "https://www.cve.org/CVERecord?id=CVE-2017-13029", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13029", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13029", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13030", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490597", }, ], notes: [ { category: "description", text: "The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13030", }, { category: "external", summary: "RHBZ#1490597", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490597", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13030", url: "https://www.cve.org/CVERecord?id=CVE-2017-13030", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13030", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13030", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13031", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490598", }, ], notes: [ { category: "description", text: "The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13031", }, { category: "external", summary: "RHBZ#1490598", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490598", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13031", url: "https://www.cve.org/CVERecord?id=CVE-2017-13031", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13031", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13031", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13032", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490599", }, ], notes: [ { category: "description", text: "The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13032", }, { category: "external", summary: "RHBZ#1490599", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490599", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13032", url: "https://www.cve.org/CVERecord?id=CVE-2017-13032", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13032", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13032", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13033", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490600", }, ], notes: [ { category: "description", text: "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13033", }, { category: "external", summary: "RHBZ#1490600", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490600", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13033", url: "https://www.cve.org/CVERecord?id=CVE-2017-13033", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13033", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13033", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13034", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490601", }, ], notes: [ { category: "description", text: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13034", }, { category: "external", summary: "RHBZ#1490601", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490601", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13034", url: "https://www.cve.org/CVERecord?id=CVE-2017-13034", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13034", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13034", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13035", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490602", }, ], notes: [ { category: "description", text: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13035", }, { category: "external", summary: "RHBZ#1490602", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490602", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13035", url: "https://www.cve.org/CVERecord?id=CVE-2017-13035", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13035", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13035", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13036", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490603", }, ], notes: [ { category: "description", text: "The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13036", }, { category: "external", summary: "RHBZ#1490603", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490603", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13036", url: "https://www.cve.org/CVERecord?id=CVE-2017-13036", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13036", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13036", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13037", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490604", }, ], notes: [ { category: "description", text: "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13037", }, { category: "external", summary: "RHBZ#1490604", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490604", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13037", url: "https://www.cve.org/CVERecord?id=CVE-2017-13037", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13037", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13037", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13038", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490605", }, ], notes: [ { category: "description", text: "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13038", }, { category: "external", summary: "RHBZ#1490605", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490605", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13038", url: "https://www.cve.org/CVERecord?id=CVE-2017-13038", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13038", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13038", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13039", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490606", }, ], notes: [ { category: "description", text: "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13039", }, { category: "external", summary: "RHBZ#1490606", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490606", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13039", url: "https://www.cve.org/CVERecord?id=CVE-2017-13039", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13039", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13039", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13040", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490607", }, ], notes: [ { category: "description", text: "The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13040", }, { category: "external", summary: "RHBZ#1490607", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490607", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13040", url: "https://www.cve.org/CVERecord?id=CVE-2017-13040", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13040", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13040", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13041", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490608", }, ], notes: [ { category: "description", text: "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13041", }, { category: "external", summary: "RHBZ#1490608", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490608", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13041", url: "https://www.cve.org/CVERecord?id=CVE-2017-13041", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13041", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13041", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13042", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490609", }, ], notes: [ { category: "description", text: "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13042", }, { category: "external", summary: "RHBZ#1490609", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490609", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13042", url: "https://www.cve.org/CVERecord?id=CVE-2017-13042", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13042", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13042", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13043", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490610", }, ], notes: [ { category: "description", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13043", }, { category: "external", summary: "RHBZ#1490610", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490610", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13043", url: "https://www.cve.org/CVERecord?id=CVE-2017-13043", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13043", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13043", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13044", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490611", }, ], notes: [ { category: "description", text: "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13044", }, { category: "external", summary: "RHBZ#1490611", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490611", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13044", url: "https://www.cve.org/CVERecord?id=CVE-2017-13044", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13044", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13044", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13045", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490612", }, ], notes: [ { category: "description", text: "The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13045", }, { category: "external", summary: "RHBZ#1490612", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490612", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13045", url: "https://www.cve.org/CVERecord?id=CVE-2017-13045", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13045", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13045", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13046", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490613", }, ], notes: [ { category: "description", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13046", }, { category: "external", summary: "RHBZ#1490613", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490613", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13046", url: "https://www.cve.org/CVERecord?id=CVE-2017-13046", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13046", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13046", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13047", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490614", }, ], notes: [ { category: "description", text: "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13047", }, { category: "external", summary: "RHBZ#1490614", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490614", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13047", url: "https://www.cve.org/CVERecord?id=CVE-2017-13047", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13047", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13047", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13048", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490615", }, ], notes: [ { category: "description", text: "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13048", }, { category: "external", summary: "RHBZ#1490615", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490615", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13048", url: "https://www.cve.org/CVERecord?id=CVE-2017-13048", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13048", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13048", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13049", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490616", }, ], notes: [ { category: "description", text: "The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13049", }, { category: "external", summary: "RHBZ#1490616", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490616", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13049", url: "https://www.cve.org/CVERecord?id=CVE-2017-13049", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13049", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13049", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13050", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490617", }, ], notes: [ { category: "description", text: "The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13050", }, { category: "external", summary: "RHBZ#1490617", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490617", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13050", url: "https://www.cve.org/CVERecord?id=CVE-2017-13050", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13050", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13050", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13051", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490618", }, ], notes: [ { category: "description", text: "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13051", }, { category: "external", summary: "RHBZ#1490618", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490618", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13051", url: "https://www.cve.org/CVERecord?id=CVE-2017-13051", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13051", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13051", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13052", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490619", }, ], notes: [ { category: "description", text: "The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13052", }, { category: "external", summary: "RHBZ#1490619", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490619", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13052", url: "https://www.cve.org/CVERecord?id=CVE-2017-13052", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13052", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13052", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13053", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490620", }, ], notes: [ { category: "description", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13053", }, { category: "external", summary: "RHBZ#1490620", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490620", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13053", url: "https://www.cve.org/CVERecord?id=CVE-2017-13053", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13053", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13053", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13054", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490621", }, ], notes: [ { category: "description", text: "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13054", }, { category: "external", summary: "RHBZ#1490621", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490621", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13054", url: "https://www.cve.org/CVERecord?id=CVE-2017-13054", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13054", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13054", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13055", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490622", }, ], notes: [ { category: "description", text: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13055", }, { category: "external", summary: "RHBZ#1490622", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490622", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13055", url: "https://www.cve.org/CVERecord?id=CVE-2017-13055", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13055", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13055", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13687", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490623", }, ], notes: [ { category: "description", text: "The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13687", }, { category: "external", summary: "RHBZ#1490623", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490623", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13687", url: "https://www.cve.org/CVERecord?id=CVE-2017-13687", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13687", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13687", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13688", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490624", }, ], notes: [ { category: "description", text: "The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13688", }, { category: "external", summary: "RHBZ#1490624", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490624", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13688", url: "https://www.cve.org/CVERecord?id=CVE-2017-13688", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13688", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13688", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13689", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490625", }, ], notes: [ { category: "description", text: "The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13689", }, { category: "external", summary: "RHBZ#1490625", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490625", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13689", url: "https://www.cve.org/CVERecord?id=CVE-2017-13689", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13689", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13689", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13690", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490626", }, ], notes: [ { category: "description", text: "The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13690", }, { category: "external", summary: "RHBZ#1490626", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490626", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13690", url: "https://www.cve.org/CVERecord?id=CVE-2017-13690", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13690", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13690", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13725", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490627", }, ], notes: [ { category: "description", text: "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13725", }, { category: "external", summary: "RHBZ#1490627", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490627", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13725", url: "https://www.cve.org/CVERecord?id=CVE-2017-13725", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13725", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13725", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", }, ], }
RHEA-2018:0705
Vulnerability from csaf_redhat
Published
2018-04-10 00:00
Modified
2024-11-22 11:30
Summary
Red Hat Enhancement Advisory: tcpdump bug fix and enhancement update
Notes
Topic
An update for tcpdump is now available for Red Hat Enterprise Linux 7.
Details
The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.
Users of tcpdump are advised to upgrade to these updated packages.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for tcpdump is now available for Red Hat Enterprise Linux 7.", title: "Topic", }, { category: "general", text: "The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.\n\nUsers of tcpdump are advised to upgrade to these updated packages.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHEA-2018:0705", url: "https://access.redhat.com/errata/RHEA-2018:0705", }, { category: "external", summary: "https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html", url: "https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html", }, { category: "external", summary: "1464390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1464390", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhea-2018_0705.json", }, ], title: "Red Hat Enhancement Advisory: tcpdump bug fix and enhancement update", tracking: { current_release_date: "2024-11-22T11:30:03+00:00", generator: { date: "2024-11-22T11:30:03+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHEA-2018:0705", initial_release_date: "2018-04-10T00:00:00+00:00", revision_history: [ { date: "2018-04-10T00:00:00+00:00", number: "1", summary: "Initial version", }, { date: "2018-04-10T11:58:24+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T11:30:03+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ComputeNode (v. 7)", product: { name: "Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::computenode", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 7)", product: { name: "Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product: { name: "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.x86_64", product: { name: "tcpdump-14:4.9.2-3.el7.x86_64", product_id: "tcpdump-14:4.9.2-3.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=x86_64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", product: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", product_id: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=x86_64&epoch=14", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.src", product: { name: "tcpdump-14:4.9.2-3.el7.src", product_id: "tcpdump-14:4.9.2-3.el7.src", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=src&epoch=14", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.s390x", product: { name: "tcpdump-14:4.9.2-3.el7.s390x", product_id: "tcpdump-14:4.9.2-3.el7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=s390x&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", product: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", product_id: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=s390x&epoch=14", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.ppc64", product: { name: "tcpdump-14:4.9.2-3.el7.ppc64", product_id: "tcpdump-14:4.9.2-3.el7.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=ppc64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", product: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", product_id: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=ppc64&epoch=14", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.ppc64le", product: { name: "tcpdump-14:4.9.2-3.el7.ppc64le", product_id: "tcpdump-14:4.9.2-3.el7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=ppc64le&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", product: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", product_id: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=ppc64le&epoch=14", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.aarch64", product: { name: "tcpdump-14:4.9.2-3.el7.aarch64", product_id: "tcpdump-14:4.9.2-3.el7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=aarch64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", product: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", product_id: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=aarch64&epoch=14", }, }, }, ], category: "architecture", name: "aarch64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", }, product_reference: "tcpdump-14:4.9.2-3.el7.src", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", }, product_reference: "tcpdump-14:4.9.2-3.el7.src", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", }, product_reference: "tcpdump-14:4.9.2-3.el7.src", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", }, product_reference: "tcpdump-14:4.9.2-3.el7.src", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", }, product_reference: "tcpdump-14:4.9.2-3.el7.src", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Workstation-7.5", }, ], }, vulnerabilities: [ { cve: "CVE-2017-11108", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2017-07-07T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1472878", }, ], notes: [ { category: "description", text: "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Heap buffer overflow in the EXTRACT_16BITS function", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-11108", }, { category: "external", summary: "RHBZ#1472878", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1472878", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-11108", url: "https://www.cve.org/CVERecord?id=CVE-2017-11108", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-11108", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11108", }, ], release_date: "2017-07-07T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "LOW", baseScore: 3.3, baseSeverity: "LOW", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Heap buffer overflow in the EXTRACT_16BITS function", }, { cve: "CVE-2017-11541", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-07-23T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1475352", }, ], notes: [ { category: "description", text: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: heap-based buffer over-read in the lldp_print", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-11541", }, { category: "external", summary: "RHBZ#1475352", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1475352", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-11541", url: "https://www.cve.org/CVERecord?id=CVE-2017-11541", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-11541", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11541", }, ], release_date: "2017-07-18T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: heap-based buffer over-read in the lldp_print", }, { cve: "CVE-2017-11542", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-07-23T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1475355", }, ], notes: [ { category: "description", text: "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: heap-based buffer over-read in the pimv1_print", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-11542", }, { category: "external", summary: "RHBZ#1475355", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1475355", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-11542", url: "https://www.cve.org/CVERecord?id=CVE-2017-11542", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-11542", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11542", }, ], release_date: "2017-07-18T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: heap-based buffer over-read in the pimv1_print", }, { cve: "CVE-2017-11543", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2017-07-23T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1475358", }, ], notes: [ { category: "description", text: "A vulnerability was discovered in tcpdump's handling of LINKTYPE_SLIP pcap files. An attacker could craft a malicious pcap file that would cause tcpdump to crash when attempting to print a summary of packet data within the file.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: buffer overflow in the sliplink_print function", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-11543", }, { category: "external", summary: "RHBZ#1475358", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1475358", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-11543", url: "https://www.cve.org/CVERecord?id=CVE-2017-11543", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-11543", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11543", }, ], release_date: "2017-07-18T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 5.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: buffer overflow in the sliplink_print function", }, { cve: "CVE-2017-11544", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-07-23T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1475359", }, ], notes: [ { category: "description", text: "A vulnerability was discovered in tcpdump's handling of LINKTYPE_SLIP pcap files. An attacker could craft a malicious pcap file that would cause tcpdump to crash when attempting to print a summary of packet data within the file.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Segmentation Violation in the compressed_sl_print", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-11544", }, { category: "external", summary: "RHBZ#1475359", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1475359", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-11544", url: "https://www.cve.org/CVERecord?id=CVE-2017-11544", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-11544", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11544", }, ], release_date: "2017-07-18T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 5.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Segmentation Violation in the compressed_sl_print", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12893", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490539", }, ], notes: [ { category: "description", text: "The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12893", }, { category: "external", summary: "RHBZ#1490539", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490539", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12893", url: "https://www.cve.org/CVERecord?id=CVE-2017-12893", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12893", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12893", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12894", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490540", }, ], notes: [ { category: "description", text: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12894", }, { category: "external", summary: "RHBZ#1490540", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490540", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12894", url: "https://www.cve.org/CVERecord?id=CVE-2017-12894", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12894", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12894", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12895", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490541", }, ], notes: [ { category: "description", text: "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12895", }, { category: "external", summary: "RHBZ#1490541", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490541", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12895", url: "https://www.cve.org/CVERecord?id=CVE-2017-12895", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12895", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12895", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12896", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490543", }, ], notes: [ { category: "description", text: "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12896", }, { category: "external", summary: "RHBZ#1490543", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490543", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12896", url: "https://www.cve.org/CVERecord?id=CVE-2017-12896", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12896", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12896", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12897", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490545", }, ], notes: [ { category: "description", text: "The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12897", }, { category: "external", summary: "RHBZ#1490545", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490545", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12897", url: "https://www.cve.org/CVERecord?id=CVE-2017-12897", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12897", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12897", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12898", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490546", }, ], notes: [ { category: "description", text: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12898", }, { category: "external", summary: "RHBZ#1490546", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490546", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12898", url: "https://www.cve.org/CVERecord?id=CVE-2017-12898", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12898", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12898", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12899", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490547", }, ], notes: [ { category: "description", text: "The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12899", }, { category: "external", summary: "RHBZ#1490547", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490547", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12899", url: "https://www.cve.org/CVERecord?id=CVE-2017-12899", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12899", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12899", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12900", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490548", }, ], notes: [ { category: "description", text: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in util-print.c:tok2strbuf()", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12900", }, { category: "external", summary: "RHBZ#1490548", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490548", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12900", url: "https://www.cve.org/CVERecord?id=CVE-2017-12900", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12900", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12900", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in util-print.c:tok2strbuf()", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12901", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490549", }, ], notes: [ { category: "description", text: "The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12901", }, { category: "external", summary: "RHBZ#1490549", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490549", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12901", url: "https://www.cve.org/CVERecord?id=CVE-2017-12901", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12901", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12901", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12902", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490550", }, ], notes: [ { category: "description", text: "The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12902", }, { category: "external", summary: "RHBZ#1490550", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490550", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12902", url: "https://www.cve.org/CVERecord?id=CVE-2017-12902", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12902", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12902", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12985", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490551", }, ], notes: [ { category: "description", text: "The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12985", }, { category: "external", summary: "RHBZ#1490551", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490551", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12985", url: "https://www.cve.org/CVERecord?id=CVE-2017-12985", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12985", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12985", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12986", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490552", }, ], notes: [ { category: "description", text: "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12986", }, { category: "external", summary: "RHBZ#1490552", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490552", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12986", url: "https://www.cve.org/CVERecord?id=CVE-2017-12986", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12986", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12986", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12987", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490553", }, ], notes: [ { category: "description", text: "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12987", }, { category: "external", summary: "RHBZ#1490553", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490553", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12987", url: "https://www.cve.org/CVERecord?id=CVE-2017-12987", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12987", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12987", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12988", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490554", }, ], notes: [ { category: "description", text: "The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12988", }, { category: "external", summary: "RHBZ#1490554", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490554", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12988", url: "https://www.cve.org/CVERecord?id=CVE-2017-12988", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12988", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12988", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12989", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490555", }, ], notes: [ { category: "description", text: "The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12989", }, { category: "external", summary: "RHBZ#1490555", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490555", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12989", url: "https://www.cve.org/CVERecord?id=CVE-2017-12989", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12989", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12989", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12990", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490556", }, ], notes: [ { category: "description", text: "The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12990", }, { category: "external", summary: "RHBZ#1490556", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490556", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12990", url: "https://www.cve.org/CVERecord?id=CVE-2017-12990", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12990", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12990", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12991", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490557", }, ], notes: [ { category: "description", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12991", }, { category: "external", summary: "RHBZ#1490557", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490557", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12991", url: "https://www.cve.org/CVERecord?id=CVE-2017-12991", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12991", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12991", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12992", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490558", }, ], notes: [ { category: "description", text: "The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12992", }, { category: "external", summary: "RHBZ#1490558", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490558", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12992", url: "https://www.cve.org/CVERecord?id=CVE-2017-12992", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12992", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12992", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12993", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490559", }, ], notes: [ { category: "description", text: "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12993", }, { category: "external", summary: "RHBZ#1490559", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490559", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12993", url: "https://www.cve.org/CVERecord?id=CVE-2017-12993", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12993", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12993", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12994", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490560", }, ], notes: [ { category: "description", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12994", }, { category: "external", summary: "RHBZ#1490560", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490560", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12994", url: "https://www.cve.org/CVERecord?id=CVE-2017-12994", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12994", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12994", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12995", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490561", }, ], notes: [ { category: "description", text: "The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12995", }, { category: "external", summary: "RHBZ#1490561", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490561", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12995", url: "https://www.cve.org/CVERecord?id=CVE-2017-12995", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12995", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12995", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12996", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490562", }, ], notes: [ { category: "description", text: "The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12996", }, { category: "external", summary: "RHBZ#1490562", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490562", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12996", url: "https://www.cve.org/CVERecord?id=CVE-2017-12996", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12996", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12996", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12997", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490564", }, ], notes: [ { category: "description", text: "The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12997", }, { category: "external", summary: "RHBZ#1490564", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490564", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12997", url: "https://www.cve.org/CVERecord?id=CVE-2017-12997", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12997", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12997", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12998", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490565", }, ], notes: [ { category: "description", text: "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12998", }, { category: "external", summary: "RHBZ#1490565", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490565", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12998", url: "https://www.cve.org/CVERecord?id=CVE-2017-12998", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12998", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12998", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12999", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490566", }, ], notes: [ { category: "description", text: "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12999", }, { category: "external", summary: "RHBZ#1490566", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490566", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12999", url: "https://www.cve.org/CVERecord?id=CVE-2017-12999", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12999", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12999", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13000", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490567", }, ], notes: [ { category: "description", text: "The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13000", }, { category: "external", summary: "RHBZ#1490567", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490567", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13000", url: "https://www.cve.org/CVERecord?id=CVE-2017-13000", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13000", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13000", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13001", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490568", }, ], notes: [ { category: "description", text: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13001", }, { category: "external", summary: "RHBZ#1490568", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490568", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13001", url: "https://www.cve.org/CVERecord?id=CVE-2017-13001", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13001", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13001", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13002", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490569", }, ], notes: [ { category: "description", text: "The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13002", }, { category: "external", summary: "RHBZ#1490569", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490569", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13002", url: "https://www.cve.org/CVERecord?id=CVE-2017-13002", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13002", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13002", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13003", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490570", }, ], notes: [ { category: "description", text: "The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13003", }, { category: "external", summary: "RHBZ#1490570", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490570", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13003", url: "https://www.cve.org/CVERecord?id=CVE-2017-13003", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13003", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13003", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13004", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490571", }, ], notes: [ { category: "description", text: "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13004", }, { category: "external", summary: "RHBZ#1490571", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490571", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13004", url: "https://www.cve.org/CVERecord?id=CVE-2017-13004", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13004", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13004", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13005", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490572", }, ], notes: [ { category: "description", text: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13005", }, { category: "external", summary: "RHBZ#1490572", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490572", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13005", url: "https://www.cve.org/CVERecord?id=CVE-2017-13005", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13005", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13005", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13006", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490573", }, ], notes: [ { category: "description", text: "The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13006", }, { category: "external", summary: "RHBZ#1490573", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490573", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13006", url: "https://www.cve.org/CVERecord?id=CVE-2017-13006", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13006", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13006", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13007", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490574", }, ], notes: [ { category: "description", text: "The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13007", }, { category: "external", summary: "RHBZ#1490574", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490574", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13007", url: "https://www.cve.org/CVERecord?id=CVE-2017-13007", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13007", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13007", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13008", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490575", }, ], notes: [ { category: "description", text: "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13008", }, { category: "external", summary: "RHBZ#1490575", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490575", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13008", url: "https://www.cve.org/CVERecord?id=CVE-2017-13008", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13008", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13008", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13009", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490576", }, ], notes: [ { category: "description", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13009", }, { category: "external", summary: "RHBZ#1490576", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490576", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13009", url: "https://www.cve.org/CVERecord?id=CVE-2017-13009", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13009", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13009", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13010", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490577", }, ], notes: [ { category: "description", text: "The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13010", }, { category: "external", summary: "RHBZ#1490577", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490577", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13010", url: "https://www.cve.org/CVERecord?id=CVE-2017-13010", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13010", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13010", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13011", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490578", }, ], notes: [ { category: "description", text: "A vulnerability was found in tcpdump's verbose printing of packet data. A crafted pcap file or specially crafted network traffic could cause tcpdump to write out of bounds in the BSS segment, potentially causing tcpdump to display truncated or incorrectly decoded fields or crash with a segmentation violation. This does not affect tcpdump when used with the -w option to save a pcap file.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer overflow in util-print.c:bittok2str_internal()", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13011", }, { category: "external", summary: "RHBZ#1490578", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490578", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13011", url: "https://www.cve.org/CVERecord?id=CVE-2017-13011", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13011", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13011", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: Buffer overflow in util-print.c:bittok2str_internal()", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13012", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490579", }, ], notes: [ { category: "description", text: "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13012", }, { category: "external", summary: "RHBZ#1490579", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490579", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13012", url: "https://www.cve.org/CVERecord?id=CVE-2017-13012", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13012", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13012", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13013", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490580", }, ], notes: [ { category: "description", text: "The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13013", }, { category: "external", summary: "RHBZ#1490580", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490580", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13013", url: "https://www.cve.org/CVERecord?id=CVE-2017-13013", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13013", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13013", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13014", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490581", }, ], notes: [ { category: "description", text: "The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13014", }, { category: "external", summary: "RHBZ#1490581", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490581", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13014", url: "https://www.cve.org/CVERecord?id=CVE-2017-13014", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13014", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13014", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13015", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490582", }, ], notes: [ { category: "description", text: "The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13015", }, { category: "external", summary: "RHBZ#1490582", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490582", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13015", url: "https://www.cve.org/CVERecord?id=CVE-2017-13015", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13015", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13015", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13016", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490583", }, ], notes: [ { category: "description", text: "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13016", }, { category: "external", summary: "RHBZ#1490583", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490583", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13016", url: "https://www.cve.org/CVERecord?id=CVE-2017-13016", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13016", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13016", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13017", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490584", }, ], notes: [ { category: "description", text: "The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13017", }, { category: "external", summary: "RHBZ#1490584", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490584", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13017", url: "https://www.cve.org/CVERecord?id=CVE-2017-13017", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13017", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13017", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13018", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490585", }, ], notes: [ { category: "description", text: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13018", }, { category: "external", summary: "RHBZ#1490585", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490585", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13018", url: "https://www.cve.org/CVERecord?id=CVE-2017-13018", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13018", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13018", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13019", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490586", }, ], notes: [ { category: "description", text: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13019", }, { category: "external", summary: "RHBZ#1490586", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490586", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13019", url: "https://www.cve.org/CVERecord?id=CVE-2017-13019", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13019", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13019", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13020", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490587", }, ], notes: [ { category: "description", text: "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13020", }, { category: "external", summary: "RHBZ#1490587", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490587", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13020", url: "https://www.cve.org/CVERecord?id=CVE-2017-13020", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13020", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13020", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13021", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490588", }, ], notes: [ { category: "description", text: "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13021", }, { category: "external", summary: "RHBZ#1490588", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490588", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13021", url: "https://www.cve.org/CVERecord?id=CVE-2017-13021", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13021", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13021", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13022", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490589", }, ], notes: [ { category: "description", text: "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13022", }, { category: "external", summary: "RHBZ#1490589", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490589", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13022", url: "https://www.cve.org/CVERecord?id=CVE-2017-13022", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13022", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13022", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13023", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490590", }, ], notes: [ { category: "description", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13023", }, { category: "external", summary: "RHBZ#1490590", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490590", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13023", url: "https://www.cve.org/CVERecord?id=CVE-2017-13023", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13023", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13023", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13024", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490591", }, ], notes: [ { category: "description", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13024", }, { category: "external", summary: "RHBZ#1490591", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490591", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13024", url: "https://www.cve.org/CVERecord?id=CVE-2017-13024", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13024", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13024", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13025", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490592", }, ], notes: [ { category: "description", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13025", }, { category: "external", summary: "RHBZ#1490592", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490592", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13025", url: "https://www.cve.org/CVERecord?id=CVE-2017-13025", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13025", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13025", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13026", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490593", }, ], notes: [ { category: "description", text: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13026", }, { category: "external", summary: "RHBZ#1490593", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490593", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13026", url: "https://www.cve.org/CVERecord?id=CVE-2017-13026", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13026", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13026", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13027", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490594", }, ], notes: [ { category: "description", text: "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13027", }, { category: "external", summary: "RHBZ#1490594", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490594", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13027", url: "https://www.cve.org/CVERecord?id=CVE-2017-13027", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13027", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13027", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13028", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490595", }, ], notes: [ { category: "description", text: "The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13028", }, { category: "external", summary: "RHBZ#1490595", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490595", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13028", url: "https://www.cve.org/CVERecord?id=CVE-2017-13028", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13028", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13028", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13029", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490596", }, ], notes: [ { category: "description", text: "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13029", }, { category: "external", summary: "RHBZ#1490596", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490596", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13029", url: "https://www.cve.org/CVERecord?id=CVE-2017-13029", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13029", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13029", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13030", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490597", }, ], notes: [ { category: "description", text: "The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13030", }, { category: "external", summary: "RHBZ#1490597", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490597", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13030", url: "https://www.cve.org/CVERecord?id=CVE-2017-13030", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13030", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13030", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13031", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490598", }, ], notes: [ { category: "description", text: "The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13031", }, { category: "external", summary: "RHBZ#1490598", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490598", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13031", url: "https://www.cve.org/CVERecord?id=CVE-2017-13031", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13031", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13031", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13032", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490599", }, ], notes: [ { category: "description", text: "The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13032", }, { category: "external", summary: "RHBZ#1490599", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490599", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13032", url: "https://www.cve.org/CVERecord?id=CVE-2017-13032", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13032", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13032", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13033", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490600", }, ], notes: [ { category: "description", text: "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13033", }, { category: "external", summary: "RHBZ#1490600", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490600", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13033", url: "https://www.cve.org/CVERecord?id=CVE-2017-13033", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13033", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13033", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13034", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490601", }, ], notes: [ { category: "description", text: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13034", }, { category: "external", summary: "RHBZ#1490601", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490601", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13034", url: "https://www.cve.org/CVERecord?id=CVE-2017-13034", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13034", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13034", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13035", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490602", }, ], notes: [ { category: "description", text: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13035", }, { category: "external", summary: "RHBZ#1490602", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490602", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13035", url: "https://www.cve.org/CVERecord?id=CVE-2017-13035", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13035", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13035", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13036", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490603", }, ], notes: [ { category: "description", text: "The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13036", }, { category: "external", summary: "RHBZ#1490603", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490603", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13036", url: "https://www.cve.org/CVERecord?id=CVE-2017-13036", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13036", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13036", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13037", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490604", }, ], notes: [ { category: "description", text: "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13037", }, { category: "external", summary: "RHBZ#1490604", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490604", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13037", url: "https://www.cve.org/CVERecord?id=CVE-2017-13037", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13037", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13037", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13038", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490605", }, ], notes: [ { category: "description", text: "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13038", }, { category: "external", summary: "RHBZ#1490605", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490605", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13038", url: "https://www.cve.org/CVERecord?id=CVE-2017-13038", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13038", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13038", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13039", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490606", }, ], notes: [ { category: "description", text: "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13039", }, { category: "external", summary: "RHBZ#1490606", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490606", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13039", url: "https://www.cve.org/CVERecord?id=CVE-2017-13039", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13039", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13039", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13040", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490607", }, ], notes: [ { category: "description", text: "The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13040", }, { category: "external", summary: "RHBZ#1490607", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490607", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13040", url: "https://www.cve.org/CVERecord?id=CVE-2017-13040", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13040", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13040", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13041", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490608", }, ], notes: [ { category: "description", text: "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13041", }, { category: "external", summary: "RHBZ#1490608", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490608", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13041", url: "https://www.cve.org/CVERecord?id=CVE-2017-13041", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13041", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13041", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13042", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490609", }, ], notes: [ { category: "description", text: "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13042", }, { category: "external", summary: "RHBZ#1490609", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490609", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13042", url: "https://www.cve.org/CVERecord?id=CVE-2017-13042", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13042", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13042", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13043", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490610", }, ], notes: [ { category: "description", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13043", }, { category: "external", summary: "RHBZ#1490610", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490610", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13043", url: "https://www.cve.org/CVERecord?id=CVE-2017-13043", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13043", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13043", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13044", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490611", }, ], notes: [ { category: "description", text: "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13044", }, { category: "external", summary: "RHBZ#1490611", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490611", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13044", url: "https://www.cve.org/CVERecord?id=CVE-2017-13044", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13044", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13044", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13045", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490612", }, ], notes: [ { category: "description", text: "The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13045", }, { category: "external", summary: "RHBZ#1490612", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490612", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13045", url: "https://www.cve.org/CVERecord?id=CVE-2017-13045", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13045", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13045", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13046", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490613", }, ], notes: [ { category: "description", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13046", }, { category: "external", summary: "RHBZ#1490613", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490613", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13046", url: "https://www.cve.org/CVERecord?id=CVE-2017-13046", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13046", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13046", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13047", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490614", }, ], notes: [ { category: "description", text: "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13047", }, { category: "external", summary: "RHBZ#1490614", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490614", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13047", url: "https://www.cve.org/CVERecord?id=CVE-2017-13047", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13047", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13047", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13048", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490615", }, ], notes: [ { category: "description", text: "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13048", }, { category: "external", summary: "RHBZ#1490615", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490615", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13048", url: "https://www.cve.org/CVERecord?id=CVE-2017-13048", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13048", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13048", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13049", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490616", }, ], notes: [ { category: "description", text: "The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13049", }, { category: "external", summary: "RHBZ#1490616", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490616", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13049", url: "https://www.cve.org/CVERecord?id=CVE-2017-13049", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13049", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13049", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13050", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490617", }, ], notes: [ { category: "description", text: "The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13050", }, { category: "external", summary: "RHBZ#1490617", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490617", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13050", url: "https://www.cve.org/CVERecord?id=CVE-2017-13050", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13050", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13050", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13051", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490618", }, ], notes: [ { category: "description", text: "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13051", }, { category: "external", summary: "RHBZ#1490618", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490618", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13051", url: "https://www.cve.org/CVERecord?id=CVE-2017-13051", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13051", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13051", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13052", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490619", }, ], notes: [ { category: "description", text: "The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13052", }, { category: "external", summary: "RHBZ#1490619", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490619", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13052", url: "https://www.cve.org/CVERecord?id=CVE-2017-13052", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13052", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13052", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13053", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490620", }, ], notes: [ { category: "description", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13053", }, { category: "external", summary: "RHBZ#1490620", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490620", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13053", url: "https://www.cve.org/CVERecord?id=CVE-2017-13053", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13053", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13053", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13054", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490621", }, ], notes: [ { category: "description", text: "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13054", }, { category: "external", summary: "RHBZ#1490621", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490621", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13054", url: "https://www.cve.org/CVERecord?id=CVE-2017-13054", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13054", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13054", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13055", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490622", }, ], notes: [ { category: "description", text: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13055", }, { category: "external", summary: "RHBZ#1490622", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490622", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13055", url: "https://www.cve.org/CVERecord?id=CVE-2017-13055", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13055", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13055", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13687", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490623", }, ], notes: [ { category: "description", text: "The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13687", }, { category: "external", summary: "RHBZ#1490623", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490623", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13687", url: "https://www.cve.org/CVERecord?id=CVE-2017-13687", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13687", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13687", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13688", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490624", }, ], notes: [ { category: "description", text: "The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13688", }, { category: "external", summary: "RHBZ#1490624", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490624", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13688", url: "https://www.cve.org/CVERecord?id=CVE-2017-13688", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13688", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13688", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13689", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490625", }, ], notes: [ { category: "description", text: "The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13689", }, { category: "external", summary: "RHBZ#1490625", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490625", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13689", url: "https://www.cve.org/CVERecord?id=CVE-2017-13689", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13689", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13689", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13690", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490626", }, ], notes: [ { category: "description", text: "The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13690", }, { category: "external", summary: "RHBZ#1490626", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490626", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13690", url: "https://www.cve.org/CVERecord?id=CVE-2017-13690", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13690", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13690", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13725", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490627", }, ], notes: [ { category: "description", text: "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13725", }, { category: "external", summary: "RHBZ#1490627", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490627", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13725", url: "https://www.cve.org/CVERecord?id=CVE-2017-13725", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13725", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13725", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", }, ], }
rhea-2018:0705
Vulnerability from csaf_redhat
Published
2018-04-10 00:00
Modified
2024-11-22 11:30
Summary
Red Hat Enhancement Advisory: tcpdump bug fix and enhancement update
Notes
Topic
An update for tcpdump is now available for Red Hat Enterprise Linux 7.
Details
The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.
Users of tcpdump are advised to upgrade to these updated packages.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for tcpdump is now available for Red Hat Enterprise Linux 7.", title: "Topic", }, { category: "general", text: "The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.\n\nUsers of tcpdump are advised to upgrade to these updated packages.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHEA-2018:0705", url: "https://access.redhat.com/errata/RHEA-2018:0705", }, { category: "external", summary: "https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html", url: "https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html", }, { category: "external", summary: "1464390", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1464390", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhea-2018_0705.json", }, ], title: "Red Hat Enhancement Advisory: tcpdump bug fix and enhancement update", tracking: { current_release_date: "2024-11-22T11:30:03+00:00", generator: { date: "2024-11-22T11:30:03+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHEA-2018:0705", initial_release_date: "2018-04-10T00:00:00+00:00", revision_history: [ { date: "2018-04-10T00:00:00+00:00", number: "1", summary: "Initial version", }, { date: "2018-04-10T11:58:24+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T11:30:03+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ComputeNode (v. 7)", product: { name: "Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::computenode", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 7)", product: { name: "Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product: { name: "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.x86_64", product: { name: "tcpdump-14:4.9.2-3.el7.x86_64", product_id: "tcpdump-14:4.9.2-3.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=x86_64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", product: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", product_id: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=x86_64&epoch=14", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.src", product: { name: "tcpdump-14:4.9.2-3.el7.src", product_id: "tcpdump-14:4.9.2-3.el7.src", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=src&epoch=14", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.s390x", product: { name: "tcpdump-14:4.9.2-3.el7.s390x", product_id: "tcpdump-14:4.9.2-3.el7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=s390x&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", product: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", product_id: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=s390x&epoch=14", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.ppc64", product: { name: "tcpdump-14:4.9.2-3.el7.ppc64", product_id: "tcpdump-14:4.9.2-3.el7.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=ppc64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", product: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", product_id: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=ppc64&epoch=14", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.ppc64le", product: { name: "tcpdump-14:4.9.2-3.el7.ppc64le", product_id: "tcpdump-14:4.9.2-3.el7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=ppc64le&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", product: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", product_id: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=ppc64le&epoch=14", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "tcpdump-14:4.9.2-3.el7.aarch64", product: { name: "tcpdump-14:4.9.2-3.el7.aarch64", product_id: "tcpdump-14:4.9.2-3.el7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump@4.9.2-3.el7?arch=aarch64&epoch=14", }, }, }, { category: "product_version", name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", product: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", product_id: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/tcpdump-debuginfo@4.9.2-3.el7?arch=aarch64&epoch=14", }, }, }, ], category: "architecture", name: "aarch64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", }, product_reference: "tcpdump-14:4.9.2-3.el7.src", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Client-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", }, product_reference: "tcpdump-14:4.9.2-3.el7.src", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)", product_id: "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7ComputeNode-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", }, product_reference: "tcpdump-14:4.9.2-3.el7.src", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Server-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", }, product_reference: "tcpdump-14:4.9.2-3.el7.src", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", product_id: "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Server-Alt-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", }, product_reference: "tcpdump-14:4.9.2-3.el7.src", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.s390x", relates_to_product_reference: "7Workstation-7.5", }, { category: "default_component_of", full_product_name: { name: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", }, product_reference: "tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", relates_to_product_reference: "7Workstation-7.5", }, ], }, vulnerabilities: [ { cve: "CVE-2017-11108", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, discovery_date: "2017-07-07T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1472878", }, ], notes: [ { category: "description", text: "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Heap buffer overflow in the EXTRACT_16BITS function", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-11108", }, { category: "external", summary: "RHBZ#1472878", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1472878", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-11108", url: "https://www.cve.org/CVERecord?id=CVE-2017-11108", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-11108", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11108", }, ], release_date: "2017-07-07T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "LOW", baseScore: 3.3, baseSeverity: "LOW", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Heap buffer overflow in the EXTRACT_16BITS function", }, { cve: "CVE-2017-11541", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-07-23T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1475352", }, ], notes: [ { category: "description", text: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: heap-based buffer over-read in the lldp_print", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-11541", }, { category: "external", summary: "RHBZ#1475352", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1475352", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-11541", url: "https://www.cve.org/CVERecord?id=CVE-2017-11541", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-11541", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11541", }, ], release_date: "2017-07-18T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: heap-based buffer over-read in the lldp_print", }, { cve: "CVE-2017-11542", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-07-23T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1475355", }, ], notes: [ { category: "description", text: "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: heap-based buffer over-read in the pimv1_print", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-11542", }, { category: "external", summary: "RHBZ#1475355", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1475355", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-11542", url: "https://www.cve.org/CVERecord?id=CVE-2017-11542", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-11542", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11542", }, ], release_date: "2017-07-18T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: heap-based buffer over-read in the pimv1_print", }, { cve: "CVE-2017-11543", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, discovery_date: "2017-07-23T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1475358", }, ], notes: [ { category: "description", text: "A vulnerability was discovered in tcpdump's handling of LINKTYPE_SLIP pcap files. An attacker could craft a malicious pcap file that would cause tcpdump to crash when attempting to print a summary of packet data within the file.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: buffer overflow in the sliplink_print function", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-11543", }, { category: "external", summary: "RHBZ#1475358", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1475358", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-11543", url: "https://www.cve.org/CVERecord?id=CVE-2017-11543", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-11543", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11543", }, ], release_date: "2017-07-18T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 5.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: buffer overflow in the sliplink_print function", }, { cve: "CVE-2017-11544", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-07-23T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1475359", }, ], notes: [ { category: "description", text: "A vulnerability was discovered in tcpdump's handling of LINKTYPE_SLIP pcap files. An attacker could craft a malicious pcap file that would cause tcpdump to crash when attempting to print a summary of packet data within the file.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Segmentation Violation in the compressed_sl_print", title: "Vulnerability summary", }, { category: "other", text: "Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", title: "Statement", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-11544", }, { category: "external", summary: "RHBZ#1475359", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1475359", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-11544", url: "https://www.cve.org/CVERecord?id=CVE-2017-11544", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-11544", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-11544", }, ], release_date: "2017-07-18T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 5.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Segmentation Violation in the compressed_sl_print", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12893", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490539", }, ], notes: [ { category: "description", text: "The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12893", }, { category: "external", summary: "RHBZ#1490539", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490539", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12893", url: "https://www.cve.org/CVERecord?id=CVE-2017-12893", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12893", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12893", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12894", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490540", }, ], notes: [ { category: "description", text: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12894", }, { category: "external", summary: "RHBZ#1490540", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490540", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12894", url: "https://www.cve.org/CVERecord?id=CVE-2017-12894", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12894", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12894", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12895", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490541", }, ], notes: [ { category: "description", text: "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12895", }, { category: "external", summary: "RHBZ#1490541", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490541", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12895", url: "https://www.cve.org/CVERecord?id=CVE-2017-12895", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12895", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12895", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12896", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490543", }, ], notes: [ { category: "description", text: "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12896", }, { category: "external", summary: "RHBZ#1490543", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490543", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12896", url: "https://www.cve.org/CVERecord?id=CVE-2017-12896", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12896", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12896", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12897", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490545", }, ], notes: [ { category: "description", text: "The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12897", }, { category: "external", summary: "RHBZ#1490545", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490545", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12897", url: "https://www.cve.org/CVERecord?id=CVE-2017-12897", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12897", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12897", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12898", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490546", }, ], notes: [ { category: "description", text: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12898", }, { category: "external", summary: "RHBZ#1490546", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490546", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12898", url: "https://www.cve.org/CVERecord?id=CVE-2017-12898", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12898", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12898", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12899", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490547", }, ], notes: [ { category: "description", text: "The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12899", }, { category: "external", summary: "RHBZ#1490547", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490547", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12899", url: "https://www.cve.org/CVERecord?id=CVE-2017-12899", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12899", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12899", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12900", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490548", }, ], notes: [ { category: "description", text: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in util-print.c:tok2strbuf()", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12900", }, { category: "external", summary: "RHBZ#1490548", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490548", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12900", url: "https://www.cve.org/CVERecord?id=CVE-2017-12900", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12900", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12900", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in util-print.c:tok2strbuf()", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12901", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490549", }, ], notes: [ { category: "description", text: "The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12901", }, { category: "external", summary: "RHBZ#1490549", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490549", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12901", url: "https://www.cve.org/CVERecord?id=CVE-2017-12901", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12901", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12901", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12902", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490550", }, ], notes: [ { category: "description", text: "The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12902", }, { category: "external", summary: "RHBZ#1490550", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490550", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12902", url: "https://www.cve.org/CVERecord?id=CVE-2017-12902", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12902", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12902", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12985", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490551", }, ], notes: [ { category: "description", text: "The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12985", }, { category: "external", summary: "RHBZ#1490551", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490551", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12985", url: "https://www.cve.org/CVERecord?id=CVE-2017-12985", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12985", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12985", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12986", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490552", }, ], notes: [ { category: "description", text: "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12986", }, { category: "external", summary: "RHBZ#1490552", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490552", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12986", url: "https://www.cve.org/CVERecord?id=CVE-2017-12986", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12986", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12986", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12987", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490553", }, ], notes: [ { category: "description", text: "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12987", }, { category: "external", summary: "RHBZ#1490553", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490553", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12987", url: "https://www.cve.org/CVERecord?id=CVE-2017-12987", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12987", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12987", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12988", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490554", }, ], notes: [ { category: "description", text: "The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12988", }, { category: "external", summary: "RHBZ#1490554", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490554", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12988", url: "https://www.cve.org/CVERecord?id=CVE-2017-12988", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12988", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12988", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12989", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490555", }, ], notes: [ { category: "description", text: "The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12989", }, { category: "external", summary: "RHBZ#1490555", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490555", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12989", url: "https://www.cve.org/CVERecord?id=CVE-2017-12989", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12989", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12989", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12990", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490556", }, ], notes: [ { category: "description", text: "The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12990", }, { category: "external", summary: "RHBZ#1490556", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490556", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12990", url: "https://www.cve.org/CVERecord?id=CVE-2017-12990", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12990", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12990", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12991", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490557", }, ], notes: [ { category: "description", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12991", }, { category: "external", summary: "RHBZ#1490557", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490557", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12991", url: "https://www.cve.org/CVERecord?id=CVE-2017-12991", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12991", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12991", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12992", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490558", }, ], notes: [ { category: "description", text: "The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12992", }, { category: "external", summary: "RHBZ#1490558", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490558", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12992", url: "https://www.cve.org/CVERecord?id=CVE-2017-12992", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12992", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12992", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12993", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490559", }, ], notes: [ { category: "description", text: "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12993", }, { category: "external", summary: "RHBZ#1490559", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490559", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12993", url: "https://www.cve.org/CVERecord?id=CVE-2017-12993", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12993", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12993", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12994", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490560", }, ], notes: [ { category: "description", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12994", }, { category: "external", summary: "RHBZ#1490560", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490560", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12994", url: "https://www.cve.org/CVERecord?id=CVE-2017-12994", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12994", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12994", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12995", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490561", }, ], notes: [ { category: "description", text: "The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12995", }, { category: "external", summary: "RHBZ#1490561", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490561", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12995", url: "https://www.cve.org/CVERecord?id=CVE-2017-12995", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12995", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12995", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12996", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490562", }, ], notes: [ { category: "description", text: "The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12996", }, { category: "external", summary: "RHBZ#1490562", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490562", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12996", url: "https://www.cve.org/CVERecord?id=CVE-2017-12996", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12996", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12996", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12997", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490564", }, ], notes: [ { category: "description", text: "The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12997", }, { category: "external", summary: "RHBZ#1490564", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490564", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12997", url: "https://www.cve.org/CVERecord?id=CVE-2017-12997", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12997", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12997", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12998", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490565", }, ], notes: [ { category: "description", text: "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12998", }, { category: "external", summary: "RHBZ#1490565", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490565", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12998", url: "https://www.cve.org/CVERecord?id=CVE-2017-12998", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12998", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12998", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-12999", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490566", }, ], notes: [ { category: "description", text: "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-12999", }, { category: "external", summary: "RHBZ#1490566", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490566", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-12999", url: "https://www.cve.org/CVERecord?id=CVE-2017-12999", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-12999", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-12999", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13000", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490567", }, ], notes: [ { category: "description", text: "The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13000", }, { category: "external", summary: "RHBZ#1490567", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490567", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13000", url: "https://www.cve.org/CVERecord?id=CVE-2017-13000", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13000", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13000", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13001", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490568", }, ], notes: [ { category: "description", text: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13001", }, { category: "external", summary: "RHBZ#1490568", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490568", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13001", url: "https://www.cve.org/CVERecord?id=CVE-2017-13001", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13001", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13001", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13002", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490569", }, ], notes: [ { category: "description", text: "The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13002", }, { category: "external", summary: "RHBZ#1490569", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490569", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13002", url: "https://www.cve.org/CVERecord?id=CVE-2017-13002", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13002", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13002", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13003", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490570", }, ], notes: [ { category: "description", text: "The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13003", }, { category: "external", summary: "RHBZ#1490570", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490570", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13003", url: "https://www.cve.org/CVERecord?id=CVE-2017-13003", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13003", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13003", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13004", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490571", }, ], notes: [ { category: "description", text: "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13004", }, { category: "external", summary: "RHBZ#1490571", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490571", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13004", url: "https://www.cve.org/CVERecord?id=CVE-2017-13004", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13004", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13004", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13005", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490572", }, ], notes: [ { category: "description", text: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13005", }, { category: "external", summary: "RHBZ#1490572", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490572", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13005", url: "https://www.cve.org/CVERecord?id=CVE-2017-13005", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13005", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13005", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13006", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490573", }, ], notes: [ { category: "description", text: "The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13006", }, { category: "external", summary: "RHBZ#1490573", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490573", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13006", url: "https://www.cve.org/CVERecord?id=CVE-2017-13006", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13006", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13006", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13007", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490574", }, ], notes: [ { category: "description", text: "The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13007", }, { category: "external", summary: "RHBZ#1490574", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490574", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13007", url: "https://www.cve.org/CVERecord?id=CVE-2017-13007", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13007", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13007", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13008", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490575", }, ], notes: [ { category: "description", text: "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13008", }, { category: "external", summary: "RHBZ#1490575", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490575", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13008", url: "https://www.cve.org/CVERecord?id=CVE-2017-13008", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13008", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13008", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13009", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490576", }, ], notes: [ { category: "description", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13009", }, { category: "external", summary: "RHBZ#1490576", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490576", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13009", url: "https://www.cve.org/CVERecord?id=CVE-2017-13009", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13009", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13009", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13010", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490577", }, ], notes: [ { category: "description", text: "The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13010", }, { category: "external", summary: "RHBZ#1490577", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490577", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13010", url: "https://www.cve.org/CVERecord?id=CVE-2017-13010", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13010", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13010", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13011", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490578", }, ], notes: [ { category: "description", text: "A vulnerability was found in tcpdump's verbose printing of packet data. A crafted pcap file or specially crafted network traffic could cause tcpdump to write out of bounds in the BSS segment, potentially causing tcpdump to display truncated or incorrectly decoded fields or crash with a segmentation violation. This does not affect tcpdump when used with the -w option to save a pcap file.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer overflow in util-print.c:bittok2str_internal()", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13011", }, { category: "external", summary: "RHBZ#1490578", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490578", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13011", url: "https://www.cve.org/CVERecord?id=CVE-2017-13011", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13011", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13011", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "tcpdump: Buffer overflow in util-print.c:bittok2str_internal()", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13012", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490579", }, ], notes: [ { category: "description", text: "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13012", }, { category: "external", summary: "RHBZ#1490579", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490579", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13012", url: "https://www.cve.org/CVERecord?id=CVE-2017-13012", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13012", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13012", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13013", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490580", }, ], notes: [ { category: "description", text: "The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13013", }, { category: "external", summary: "RHBZ#1490580", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490580", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13013", url: "https://www.cve.org/CVERecord?id=CVE-2017-13013", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13013", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13013", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13014", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490581", }, ], notes: [ { category: "description", text: "The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13014", }, { category: "external", summary: "RHBZ#1490581", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490581", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13014", url: "https://www.cve.org/CVERecord?id=CVE-2017-13014", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13014", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13014", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13015", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490582", }, ], notes: [ { category: "description", text: "The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13015", }, { category: "external", summary: "RHBZ#1490582", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490582", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13015", url: "https://www.cve.org/CVERecord?id=CVE-2017-13015", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13015", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13015", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13016", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490583", }, ], notes: [ { category: "description", text: "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13016", }, { category: "external", summary: "RHBZ#1490583", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490583", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13016", url: "https://www.cve.org/CVERecord?id=CVE-2017-13016", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13016", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13016", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13017", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490584", }, ], notes: [ { category: "description", text: "The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13017", }, { category: "external", summary: "RHBZ#1490584", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490584", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13017", url: "https://www.cve.org/CVERecord?id=CVE-2017-13017", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13017", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13017", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13018", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490585", }, ], notes: [ { category: "description", text: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13018", }, { category: "external", summary: "RHBZ#1490585", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490585", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13018", url: "https://www.cve.org/CVERecord?id=CVE-2017-13018", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13018", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13018", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13019", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490586", }, ], notes: [ { category: "description", text: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13019", }, { category: "external", summary: "RHBZ#1490586", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490586", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13019", url: "https://www.cve.org/CVERecord?id=CVE-2017-13019", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13019", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13019", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13020", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490587", }, ], notes: [ { category: "description", text: "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13020", }, { category: "external", summary: "RHBZ#1490587", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490587", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13020", url: "https://www.cve.org/CVERecord?id=CVE-2017-13020", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13020", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13020", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13021", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490588", }, ], notes: [ { category: "description", text: "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13021", }, { category: "external", summary: "RHBZ#1490588", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490588", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13021", url: "https://www.cve.org/CVERecord?id=CVE-2017-13021", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13021", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13021", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13022", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490589", }, ], notes: [ { category: "description", text: "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13022", }, { category: "external", summary: "RHBZ#1490589", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490589", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13022", url: "https://www.cve.org/CVERecord?id=CVE-2017-13022", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13022", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13022", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13023", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490590", }, ], notes: [ { category: "description", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13023", }, { category: "external", summary: "RHBZ#1490590", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490590", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13023", url: "https://www.cve.org/CVERecord?id=CVE-2017-13023", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13023", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13023", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13024", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490591", }, ], notes: [ { category: "description", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13024", }, { category: "external", summary: "RHBZ#1490591", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490591", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13024", url: "https://www.cve.org/CVERecord?id=CVE-2017-13024", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13024", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13024", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13025", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490592", }, ], notes: [ { category: "description", text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13025", }, { category: "external", summary: "RHBZ#1490592", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490592", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13025", url: "https://www.cve.org/CVERecord?id=CVE-2017-13025", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13025", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13025", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13026", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490593", }, ], notes: [ { category: "description", text: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13026", }, { category: "external", summary: "RHBZ#1490593", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490593", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13026", url: "https://www.cve.org/CVERecord?id=CVE-2017-13026", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13026", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13026", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13027", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490594", }, ], notes: [ { category: "description", text: "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13027", }, { category: "external", summary: "RHBZ#1490594", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490594", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13027", url: "https://www.cve.org/CVERecord?id=CVE-2017-13027", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13027", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13027", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13028", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490595", }, ], notes: [ { category: "description", text: "The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13028", }, { category: "external", summary: "RHBZ#1490595", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490595", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13028", url: "https://www.cve.org/CVERecord?id=CVE-2017-13028", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13028", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13028", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13029", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490596", }, ], notes: [ { category: "description", text: "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13029", }, { category: "external", summary: "RHBZ#1490596", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490596", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13029", url: "https://www.cve.org/CVERecord?id=CVE-2017-13029", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13029", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13029", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13030", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490597", }, ], notes: [ { category: "description", text: "The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13030", }, { category: "external", summary: "RHBZ#1490597", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490597", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13030", url: "https://www.cve.org/CVERecord?id=CVE-2017-13030", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13030", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13030", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13031", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490598", }, ], notes: [ { category: "description", text: "The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13031", }, { category: "external", summary: "RHBZ#1490598", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490598", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13031", url: "https://www.cve.org/CVERecord?id=CVE-2017-13031", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13031", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13031", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13032", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490599", }, ], notes: [ { category: "description", text: "The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13032", }, { category: "external", summary: "RHBZ#1490599", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490599", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13032", url: "https://www.cve.org/CVERecord?id=CVE-2017-13032", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13032", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13032", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13033", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490600", }, ], notes: [ { category: "description", text: "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13033", }, { category: "external", summary: "RHBZ#1490600", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490600", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13033", url: "https://www.cve.org/CVERecord?id=CVE-2017-13033", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13033", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13033", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13034", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490601", }, ], notes: [ { category: "description", text: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13034", }, { category: "external", summary: "RHBZ#1490601", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490601", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13034", url: "https://www.cve.org/CVERecord?id=CVE-2017-13034", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13034", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13034", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13035", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490602", }, ], notes: [ { category: "description", text: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13035", }, { category: "external", summary: "RHBZ#1490602", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490602", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13035", url: "https://www.cve.org/CVERecord?id=CVE-2017-13035", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13035", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13035", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13036", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490603", }, ], notes: [ { category: "description", text: "The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13036", }, { category: "external", summary: "RHBZ#1490603", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490603", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13036", url: "https://www.cve.org/CVERecord?id=CVE-2017-13036", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13036", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13036", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13037", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490604", }, ], notes: [ { category: "description", text: "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13037", }, { category: "external", summary: "RHBZ#1490604", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490604", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13037", url: "https://www.cve.org/CVERecord?id=CVE-2017-13037", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13037", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13037", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13038", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490605", }, ], notes: [ { category: "description", text: "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13038", }, { category: "external", summary: "RHBZ#1490605", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490605", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13038", url: "https://www.cve.org/CVERecord?id=CVE-2017-13038", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13038", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13038", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13039", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490606", }, ], notes: [ { category: "description", text: "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13039", }, { category: "external", summary: "RHBZ#1490606", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490606", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13039", url: "https://www.cve.org/CVERecord?id=CVE-2017-13039", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13039", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13039", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13040", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490607", }, ], notes: [ { category: "description", text: "The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13040", }, { category: "external", summary: "RHBZ#1490607", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490607", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13040", url: "https://www.cve.org/CVERecord?id=CVE-2017-13040", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13040", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13040", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13041", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490608", }, ], notes: [ { category: "description", text: "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13041", }, { category: "external", summary: "RHBZ#1490608", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490608", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13041", url: "https://www.cve.org/CVERecord?id=CVE-2017-13041", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13041", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13041", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13042", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490609", }, ], notes: [ { category: "description", text: "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13042", }, { category: "external", summary: "RHBZ#1490609", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490609", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13042", url: "https://www.cve.org/CVERecord?id=CVE-2017-13042", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13042", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13042", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13043", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490610", }, ], notes: [ { category: "description", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13043", }, { category: "external", summary: "RHBZ#1490610", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490610", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13043", url: "https://www.cve.org/CVERecord?id=CVE-2017-13043", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13043", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13043", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13044", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490611", }, ], notes: [ { category: "description", text: "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13044", }, { category: "external", summary: "RHBZ#1490611", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490611", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13044", url: "https://www.cve.org/CVERecord?id=CVE-2017-13044", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13044", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13044", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13045", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490612", }, ], notes: [ { category: "description", text: "The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13045", }, { category: "external", summary: "RHBZ#1490612", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490612", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13045", url: "https://www.cve.org/CVERecord?id=CVE-2017-13045", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13045", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13045", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13046", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490613", }, ], notes: [ { category: "description", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13046", }, { category: "external", summary: "RHBZ#1490613", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490613", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13046", url: "https://www.cve.org/CVERecord?id=CVE-2017-13046", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13046", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13046", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13047", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490614", }, ], notes: [ { category: "description", text: "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13047", }, { category: "external", summary: "RHBZ#1490614", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490614", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13047", url: "https://www.cve.org/CVERecord?id=CVE-2017-13047", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13047", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13047", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13048", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490615", }, ], notes: [ { category: "description", text: "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13048", }, { category: "external", summary: "RHBZ#1490615", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490615", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13048", url: "https://www.cve.org/CVERecord?id=CVE-2017-13048", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13048", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13048", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13049", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490616", }, ], notes: [ { category: "description", text: "The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13049", }, { category: "external", summary: "RHBZ#1490616", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490616", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13049", url: "https://www.cve.org/CVERecord?id=CVE-2017-13049", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13049", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13049", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13050", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490617", }, ], notes: [ { category: "description", text: "The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13050", }, { category: "external", summary: "RHBZ#1490617", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490617", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13050", url: "https://www.cve.org/CVERecord?id=CVE-2017-13050", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13050", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13050", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13051", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490618", }, ], notes: [ { category: "description", text: "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13051", }, { category: "external", summary: "RHBZ#1490618", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490618", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13051", url: "https://www.cve.org/CVERecord?id=CVE-2017-13051", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13051", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13051", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13052", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490619", }, ], notes: [ { category: "description", text: "The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13052", }, { category: "external", summary: "RHBZ#1490619", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490619", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13052", url: "https://www.cve.org/CVERecord?id=CVE-2017-13052", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13052", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13052", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13053", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490620", }, ], notes: [ { category: "description", text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13053", }, { category: "external", summary: "RHBZ#1490620", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490620", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13053", url: "https://www.cve.org/CVERecord?id=CVE-2017-13053", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13053", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13053", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13054", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490621", }, ], notes: [ { category: "description", text: "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13054", }, { category: "external", summary: "RHBZ#1490621", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490621", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13054", url: "https://www.cve.org/CVERecord?id=CVE-2017-13054", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13054", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13054", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13055", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490622", }, ], notes: [ { category: "description", text: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13055", }, { category: "external", summary: "RHBZ#1490622", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490622", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13055", url: "https://www.cve.org/CVERecord?id=CVE-2017-13055", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13055", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13055", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13687", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490623", }, ], notes: [ { category: "description", text: "The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13687", }, { category: "external", summary: "RHBZ#1490623", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490623", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13687", url: "https://www.cve.org/CVERecord?id=CVE-2017-13687", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13687", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13687", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13688", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490624", }, ], notes: [ { category: "description", text: "The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13688", }, { category: "external", summary: "RHBZ#1490624", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490624", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13688", url: "https://www.cve.org/CVERecord?id=CVE-2017-13688", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13688", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13688", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13689", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490625", }, ], notes: [ { category: "description", text: "The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13689", }, { category: "external", summary: "RHBZ#1490625", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490625", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13689", url: "https://www.cve.org/CVERecord?id=CVE-2017-13689", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13689", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13689", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13690", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490626", }, ], notes: [ { category: "description", text: "The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13690", }, { category: "external", summary: "RHBZ#1490626", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490626", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13690", url: "https://www.cve.org/CVERecord?id=CVE-2017-13690", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13690", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13690", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser", }, { acknowledgments: [ { names: [ "the Tcpdump project", ], }, ], cve: "CVE-2017-13725", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-09-05T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1490627", }, ], notes: [ { category: "description", text: "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().", title: "Vulnerability description", }, { category: "summary", text: "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-13725", }, { category: "external", summary: "RHBZ#1490627", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1490627", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-13725", url: "https://www.cve.org/CVERecord?id=CVE-2017-13725", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-13725", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-13725", }, ], release_date: "2017-09-13T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2018-04-10T00:00:00+00:00", details: "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", product_ids: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "7Client-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-14:4.9.2-3.el7.src", "7Client-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Client-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.src", "7ComputeNode-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7ComputeNode-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.src", "7Server-Alt-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Server-Alt-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.src", "7Workstation-7.5:tcpdump-14:4.9.2-3.el7.x86_64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.aarch64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.ppc64le", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.s390x", "7Workstation-7.5:tcpdump-debuginfo-14:4.9.2-3.el7.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser", }, ], }
icsa-19-155-01
Vulnerability from csaf_cisa
Published
2019-06-04 00:00
Modified
2019-06-04 00:00
Summary
PHOENIX CONTACT PLCNext AXC F 2152
Notes
CISA Disclaimer
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
Successful exploitation of these vulnerabilities could allow an attacker to decrypt passwords, bypass authentication, and deny service to the device. In addition, these vulnerabilities could interact with third-party vulnerabilities to cause other impacts to integrity, confidentiality, and availability.
Critical infrastructure sectors
Commercial Facilities
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
NCCIC recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:
Recommended Practices
NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.
Recommended Practices
NCCIC also recommends that users take the following measures to protect themselves from social engineering attacks:
Exploitability
No known public exploits specifically target these vulnerabilities.
{ document: { acknowledgments: [ { names: [ "Zahra Khani", ], organization: "Firmalyzer", summary: "reporting some of these vulnerabilities to NCCIC", }, { organization: "OPC Foundation", summary: "reporting some of these vulnerabilities to Phoenix Contact", }, ], category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Disclosure is not limited", tlp: { label: "WHITE", url: "https://us-cert.cisa.gov/tlp/", }, }, lang: "en-US", notes: [ { category: "general", text: "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", title: "CISA Disclaimer", }, { category: "legal_disclaimer", text: "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", title: "Legal Notice", }, { category: "summary", text: "Successful exploitation of these vulnerabilities could allow an attacker to decrypt passwords, bypass authentication, and deny service to the device. In addition, these vulnerabilities could interact with third-party vulnerabilities to cause other impacts to integrity, confidentiality, and availability.", title: "Risk evaluation", }, { category: "other", text: "Commercial Facilities", title: "Critical infrastructure sectors", }, { category: "other", text: "Worldwide", title: "Countries/areas deployed", }, { category: "other", text: "Germany", title: "Company headquarters location", }, { category: "general", text: "NCCIC recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:", title: "Recommended Practices", }, { category: "general", text: "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", title: "Recommended Practices", }, { category: "general", text: "Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.", title: "Recommended Practices", }, { category: "general", text: "NCCIC also recommends that users take the following measures to protect themselves from social engineering attacks:", title: "Recommended Practices", }, { category: "other", text: "No known public exploits specifically target these vulnerabilities.", title: "Exploitability", }, ], publisher: { category: "coordinator", contact_details: "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", name: "CISA", namespace: "https://www.cisa.gov/", }, references: [ { category: "self", summary: "ICS Advisory ICSA-19-155-01 JSON", url: "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-155-01.json", }, { category: "self", summary: "ICS Advisory ICSA-19-155-01 - Web Scraped Version", url: "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01", }, ], title: "PHOENIX CONTACT PLCNext AXC F 2152", tracking: { current_release_date: "2019-06-04T00:00:00.000000Z", generator: { engine: { name: "CISA CSAF Generator", version: "1.0.0", }, }, id: "ICSA-19-155-01", initial_release_date: "2019-06-04T00:00:00.000000Z", revision_history: [ { date: "2019-06-04T00:00:00.000000Z", legacy_version: "Initial", number: "1", summary: "ICSA-19-155-01 PHOENIX CONTACT PLCNext AXC F 2152", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version_range", name: "2404267 version 1.x", product: { name: "AXC F 2152: article number 2404267 version 1.x", product_id: "CSAFPID-0001", }, }, ], category: "product_name", name: "AXC F 2152", }, { branches: [ { category: "product_version_range", name: "1046568 (Starterkit) version 1.x", product: { name: "AXC F 2152: article number 1046568 (Starterkit) version 1.x", product_id: "CSAFPID-0002", }, }, ], category: "product_name", name: "AXC F 2152", }, ], category: "vendor", name: "Phoenix Contact", }, ], }, vulnerabilities: [ { cve: "CVE-2018-7559", cwe: { id: "CWE-326", name: "Inadequate Encryption Strength", }, notes: [ { category: "summary", text: "A remote attacker can exploit a server 's private key by sending carefully constructed UserIdentityTokens encrypted with the Basic128Rsa15 security policy. This could allow an attacker to decrypt passwords even if encrypted with another security policy such as Basic256Sha256. CVE-2018-7559 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L).", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7559", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.6, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2019-10998", cwe: { id: "CWE-284", name: "Improper Access Control", }, notes: [ { category: "summary", text: "An attacker with physical access to the device can manipulate SD card data, which could allow an attacker to bypass the authentication of the device. This device is designed for use in a protected industrial environment with restricted physical access.CVE-2019-10998 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10998", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 6.8, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2019-10997", cwe: { id: "CWE-300", name: "Channel Accessible by Non-Endpoint", }, notes: [ { category: "summary", text: "An attacker trying to connect to the device using a man-in-the-middle setup may crash the PLC service, resulting in a denial of service condition. The device must then be rebooted, or the PLC service must be restarted manually via Linux shell.CVE-2019-10997 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10997", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-8816", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, notes: [ { category: "summary", text: "The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8816", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", environmentalScore: 9.8, environmentalSeverity: "CRITICAL", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", temporalScore: 9.8, temporalSeverity: "CRITICAL", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-9953", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-9953", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", environmentalScore: 9.8, environmentalSeverity: "CRITICAL", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", temporalScore: 9.8, temporalSeverity: "CRITICAL", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-8817", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8817", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-11541", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11541", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-11542", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11542", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-11543", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11543", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-5334", cwe: { id: "CWE-415", name: "Double Free", }, notes: [ { category: "summary", text: "Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5334", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-5336", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP certificate.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5336", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-9841", cwe: { id: "CWE-823", name: "Use of Out-of-range Pointer Offset", }, notes: [ { category: "summary", text: "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9841", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-1000120", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "summary", text: "A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000120", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-5337", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5337", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-9843", cwe: { id: "CWE-354", name: "Improper Validation of Integrity Check Value", }, notes: [ { category: "summary", text: "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9843", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-1000257", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl's deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000257", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.1, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-1000122", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000122", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.1, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-1000301", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000301", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.1, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-1000005", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once appended a string like `:` to the target buffer, while this was recently changed to `: ` (a space was added after the colon) but the following math wasn't updated correspondingly. When accessed, the data is read out of bounds and causes either a crash or that the (too large) data gets passed to client write. This could lead to a denial-of-service situation or an information disclosure if someone has a service that echoes back or uses the trailers for something.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000005", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.1, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-9842", cwe: { id: "CWE-1335", name: "Incorrect Bitwise Shift of Integer", }, notes: [ { category: "summary", text: "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9842", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-9840", cwe: { id: "CWE-823", name: "Use of Out-of-range Pointer Offset", }, notes: [ { category: "summary", text: "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9840", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-9952", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, notes: [ { category: "summary", text: "The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted wildcard SAN in a server certificate, as demonstrated by \"*.com.\"", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9952", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 8.1, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-1247", cwe: { id: "CWE-59", name: "Improper Link Resolution Before File Access ('Link Following')", }, notes: [ { category: "summary", text: "The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and before 1.10.1-0ubuntu1.1 on Ubuntu 16.10, and the nginx ebuild before 1.10.2-r3 on Gentoo allow local users with access to the web server user account to gain root privileges via a symlink attack on the error log.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1247", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-9023", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, notes: [ { category: "summary", text: "The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9023", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-6301", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6301", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-7141", cwe: { id: "CWE-287", name: "Improper Authentication", }, notes: [ { category: "summary", text: "curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7141", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-7444", cwe: { id: "CWE-130", name: "Improper Handling of Length Parameter Inconsistency", }, notes: [ { category: "summary", text: "The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7444", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-1000121", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000121", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-1000254", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000254", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-11108", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11108", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-11185", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11185", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-3731", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3731", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-9233", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, notes: [ { category: "summary", text: "XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9233", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-5335", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5335", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-9022", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9022", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-1000117", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000117", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 6.7, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-5388", cwe: { id: "CWE-124", name: "Buffer Underwrite ('Buffer Underflow')", }, notes: [ { category: "summary", text: "In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5388", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-1000101", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "curl supports \"globbing\" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a carefully crafted, or just wrongly written, URL. The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing. An example of a URL that triggers the flaw would be `http://ur%20[0-60000000000000000000`.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000101", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-1000100", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn't restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl's redirect protocols with --proto-redir and libcurl's with CURLOPT_REDIR_PROTOCOLS.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000100", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-7103", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, notes: [ { category: "summary", text: "Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7103", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2015-9251", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, notes: [ { category: "summary", text: "jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9251", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-3738", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3738", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-0737", cwe: { id: "CWE-327", name: "Use of a Broken or Risky Cryptographic Algorithm", }, notes: [ { category: "summary", text: "The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0737", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-3737", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "summary", text: "OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3737", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-15906", cwe: { id: "CWE-269", name: "Improper Privilege Management", }, notes: [ { category: "summary", text: "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15906", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-3735", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3735", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, ], }
ICSA-19-155-01
Vulnerability from csaf_cisa
Published
2019-06-04 00:00
Modified
2019-06-04 00:00
Summary
PHOENIX CONTACT PLCNext AXC F 2152
Notes
CISA Disclaimer
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
Successful exploitation of these vulnerabilities could allow an attacker to decrypt passwords, bypass authentication, and deny service to the device. In addition, these vulnerabilities could interact with third-party vulnerabilities to cause other impacts to integrity, confidentiality, and availability.
Critical infrastructure sectors
Commercial Facilities
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
NCCIC recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:
Recommended Practices
NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.
Recommended Practices
NCCIC also recommends that users take the following measures to protect themselves from social engineering attacks:
Exploitability
No known public exploits specifically target these vulnerabilities.
{ document: { acknowledgments: [ { names: [ "Zahra Khani", ], organization: "Firmalyzer", summary: "reporting some of these vulnerabilities to NCCIC", }, { organization: "OPC Foundation", summary: "reporting some of these vulnerabilities to Phoenix Contact", }, ], category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Disclosure is not limited", tlp: { label: "WHITE", url: "https://us-cert.cisa.gov/tlp/", }, }, lang: "en-US", notes: [ { category: "general", text: "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", title: "CISA Disclaimer", }, { category: "legal_disclaimer", text: "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", title: "Legal Notice", }, { category: "summary", text: "Successful exploitation of these vulnerabilities could allow an attacker to decrypt passwords, bypass authentication, and deny service to the device. In addition, these vulnerabilities could interact with third-party vulnerabilities to cause other impacts to integrity, confidentiality, and availability.", title: "Risk evaluation", }, { category: "other", text: "Commercial Facilities", title: "Critical infrastructure sectors", }, { category: "other", text: "Worldwide", title: "Countries/areas deployed", }, { category: "other", text: "Germany", title: "Company headquarters location", }, { category: "general", text: "NCCIC recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:", title: "Recommended Practices", }, { category: "general", text: "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", title: "Recommended Practices", }, { category: "general", text: "Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.", title: "Recommended Practices", }, { category: "general", text: "NCCIC also recommends that users take the following measures to protect themselves from social engineering attacks:", title: "Recommended Practices", }, { category: "other", text: "No known public exploits specifically target these vulnerabilities.", title: "Exploitability", }, ], publisher: { category: "coordinator", contact_details: "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", name: "CISA", namespace: "https://www.cisa.gov/", }, references: [ { category: "self", summary: "ICS Advisory ICSA-19-155-01 JSON", url: "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-155-01.json", }, { category: "self", summary: "ICS Advisory ICSA-19-155-01 - Web Scraped Version", url: "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/news-events/ics-advisories/icsa-19-155-01", }, ], title: "PHOENIX CONTACT PLCNext AXC F 2152", tracking: { current_release_date: "2019-06-04T00:00:00.000000Z", generator: { engine: { name: "CISA CSAF Generator", version: "1.0.0", }, }, id: "ICSA-19-155-01", initial_release_date: "2019-06-04T00:00:00.000000Z", revision_history: [ { date: "2019-06-04T00:00:00.000000Z", legacy_version: "Initial", number: "1", summary: "ICSA-19-155-01 PHOENIX CONTACT PLCNext AXC F 2152", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version_range", name: "2404267 version 1.x", product: { name: "AXC F 2152: article number 2404267 version 1.x", product_id: "CSAFPID-0001", }, }, ], category: "product_name", name: "AXC F 2152", }, { branches: [ { category: "product_version_range", name: "1046568 (Starterkit) version 1.x", product: { name: "AXC F 2152: article number 1046568 (Starterkit) version 1.x", product_id: "CSAFPID-0002", }, }, ], category: "product_name", name: "AXC F 2152", }, ], category: "vendor", name: "Phoenix Contact", }, ], }, vulnerabilities: [ { cve: "CVE-2018-7559", cwe: { id: "CWE-326", name: "Inadequate Encryption Strength", }, notes: [ { category: "summary", text: "A remote attacker can exploit a server 's private key by sending carefully constructed UserIdentityTokens encrypted with the Basic128Rsa15 security policy. This could allow an attacker to decrypt passwords even if encrypted with another security policy such as Basic256Sha256. CVE-2018-7559 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L).", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7559", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.6, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2019-10998", cwe: { id: "CWE-284", name: "Improper Access Control", }, notes: [ { category: "summary", text: "An attacker with physical access to the device can manipulate SD card data, which could allow an attacker to bypass the authentication of the device. This device is designed for use in a protected industrial environment with restricted physical access.CVE-2019-10998 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10998", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 6.8, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2019-10997", cwe: { id: "CWE-300", name: "Channel Accessible by Non-Endpoint", }, notes: [ { category: "summary", text: "An attacker trying to connect to the device using a man-in-the-middle setup may crash the PLC service, resulting in a denial of service condition. The device must then be rebooted, or the PLC service must be restarted manually via Linux shell.CVE-2019-10997 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10997", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-8816", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, notes: [ { category: "summary", text: "The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8816", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", environmentalScore: 9.8, environmentalSeverity: "CRITICAL", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", temporalScore: 9.8, temporalSeverity: "CRITICAL", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-9953", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-9953", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", environmentalScore: 9.8, environmentalSeverity: "CRITICAL", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", temporalScore: 9.8, temporalSeverity: "CRITICAL", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-8817", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8817", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-11541", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11541", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-11542", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11542", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-11543", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11543", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-5334", cwe: { id: "CWE-415", name: "Double Free", }, notes: [ { category: "summary", text: "Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5334", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-5336", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP certificate.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5336", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-9841", cwe: { id: "CWE-823", name: "Use of Out-of-range Pointer Offset", }, notes: [ { category: "summary", text: "inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9841", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-1000120", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "summary", text: "A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000120", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-5337", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5337", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-9843", cwe: { id: "CWE-354", name: "Improper Validation of Integrity Check Value", }, notes: [ { category: "summary", text: "The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9843", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-1000257", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl's deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000257", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.1, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-1000122", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000122", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.1, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-1000301", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000301", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.1, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-1000005", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once appended a string like `:` to the target buffer, while this was recently changed to `: ` (a space was added after the colon) but the following math wasn't updated correspondingly. When accessed, the data is read out of bounds and causes either a crash or that the (too large) data gets passed to client write. This could lead to a denial-of-service situation or an information disclosure if someone has a service that echoes back or uses the trailers for something.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000005", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 9.1, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-9842", cwe: { id: "CWE-1335", name: "Incorrect Bitwise Shift of Integer", }, notes: [ { category: "summary", text: "The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9842", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-9840", cwe: { id: "CWE-823", name: "Use of Out-of-range Pointer Offset", }, notes: [ { category: "summary", text: "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9840", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-9952", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, notes: [ { category: "summary", text: "The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted wildcard SAN in a server certificate, as demonstrated by \"*.com.\"", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9952", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 8.1, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-1247", cwe: { id: "CWE-59", name: "Improper Link Resolution Before File Access ('Link Following')", }, notes: [ { category: "summary", text: "The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and before 1.10.1-0ubuntu1.1 on Ubuntu 16.10, and the nginx ebuild before 1.10.2-r3 on Gentoo allow local users with access to the web server user account to gain root privileges via a symlink attack on the error log.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1247", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-9023", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, notes: [ { category: "summary", text: "The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted certificate.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9023", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-6301", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6301", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-7141", cwe: { id: "CWE-287", name: "Improper Authentication", }, notes: [ { category: "summary", text: "curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7141", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-7444", cwe: { id: "CWE-130", name: "Improper Handling of Length Parameter Inconsistency", }, notes: [ { category: "summary", text: "The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7444", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-1000121", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000121", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-1000254", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000254", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-11108", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11108", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-11185", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted RSA signature.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-11185", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-3731", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3731", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-9233", cwe: { id: "CWE-835", name: "Loop with Unreachable Exit Condition ('Infinite Loop')", }, notes: [ { category: "summary", text: "XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9233", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-5335", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5335", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-9022", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9022", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-1000117", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000117", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 6.7, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-5388", cwe: { id: "CWE-124", name: "Buffer Underwrite ('Buffer Underflow')", }, notes: [ { category: "summary", text: "In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while reading from the socket.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5388", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-1000101", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "curl supports \"globbing\" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of transfers. In the globbing function that parses the numerical range, there was an omission that made curl read a byte beyond the end of the URL if given a carefully crafted, or just wrongly written, URL. The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing. An example of a URL that triggers the flaw would be `http://ur%20[0-60000000000000000000`.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000101", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-1000100", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name is truncated to fit within the buffer boundaries, but the buffer size is still wrongly updated to use the untruncated length. This too large value is then used in the sendto() call, making curl attempt to send more data than what is actually put into the buffer. The endto() function will then read beyond the end of the heap based buffer. A malicious HTTP(S) server could redirect a vulnerable libcurl-using client to a crafted TFTP URL (if the client hasn't restricted which protocols it allows redirects to) and trick it to send private memory contents to a remote server over UDP. Limit curl's redirect protocols with --proto-redir and libcurl's with CURLOPT_REDIR_PROTOCOLS.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000100", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2016-7103", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, notes: [ { category: "summary", text: "Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7103", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2015-9251", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, notes: [ { category: "summary", text: "jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9251", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-3738", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3738", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2018-0737", cwe: { id: "CWE-327", name: "Use of a Broken or Risky Cryptographic Algorithm", }, notes: [ { category: "summary", text: "The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0737", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-3737", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "summary", text: "OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3737", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-15906", cwe: { id: "CWE-269", name: "Improper Privilege Management", }, notes: [ { category: "summary", text: "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15906", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, { cve: "CVE-2017-3735", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.", title: "Vulnerability Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", ], }, references: [ { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3735", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", }, ], remediations: [ { category: "mitigation", details: "Phoenix Contact recommends affected users update to firmware release 2019.0 LTS or later, update to PLCNext Engineer release 2019.0 LTS or later, and apply the following specific mitigations below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Disable Basic128Rsa15 security policy in OPC Servers configuration. Use only Basic256 or higher.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "vendor_fix", details: "Follow the advice concerning SD card usage in the manual “Art.-Nr. 107708: UM EN AXC F 2152 Installing, starting up, and operating the AXC F 2152 controller um_en_axc_f_2152_107708_en_02.pdf” that can be found on the product page below:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/online/portal/us/?uri=pxc-oc-itemdetail:pid=2404267&library=usen&pcck=P-21-14-01&tab=1&selectedCategory=ALL", }, { category: "mitigation", details: "Use the notification manager to monitor SD card exchanges by the application program.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Subscribe to PSIRT news as updates on the SD card vulnerability will be provided in the future.", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], }, { category: "mitigation", details: "Phoenix Contact also recommends users operate the devices in closed networks or environments protected with a suitable firewall. For detailed information on recommendations for measures to protect network-capable devices, please refer to the Phoenix Contact application note “Art.-Nr. 107913: AH EN INDUSTRIAL SECURITY - Measures to protect network-capable devices with Ethernet connection against unauthorized access,” which can be found at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://www.phoenixcontact.com/assets/downloads_ed/local_pc/web_dwl_technical_info/ah_en_industrial_security_107913_en_01.pdf", }, { category: "mitigation", details: "For more information, CERT@VDE has released a security advisory available at the following link:", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", ], url: "https://cert.vde.com/en-us/advisories/vde-2019-009", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "CSAFPID-0001", "CSAFPID-0002", ], }, ], }, ], }
fkie_cve-2017-11541
Vulnerability from fkie_nvd
Published
2017-07-23 03:29
Modified
2024-11-21 03:07
Severity ?
Summary
tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
References
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*", matchCriteriaId: "A6BE599F-A3FF-402C-A2C8-119B5E81CE8C", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", }, { lang: "es", value: "tcpdump 4.9.0 presenta una sobrelectura de búfer basada en memoria dinámica (heap) en la función lldp_print en print-lldp.c. Esto está relacionado con to util-print.c.", }, ], id: "CVE-2017-11541", lastModified: "2024-11-21T03:07:58.890", metrics: { cvssMetricV2: [ { acInsufInfo: true, baseSeverity: "HIGH", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 7.5, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 6.4, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV30: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, exploitabilityScore: 3.9, impactScore: 5.9, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2017-07-23T03:29:00.813", references: [ { source: "cve@mitre.org", url: "http://www.debian.org/security/2017/dsa-3971", }, { source: "cve@mitre.org", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/99941", }, { source: "cve@mitre.org", url: "http://www.securitytracker.com/id/1039307", }, { source: "cve@mitre.org", url: "https://access.redhat.com/errata/RHEA-2018:0705", }, { source: "cve@mitre.org", tags: [ "Exploit", "Third Party Advisory", ], url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print", }, { source: "cve@mitre.org", url: "https://security.gentoo.org/glsa/201709-23", }, { source: "cve@mitre.org", url: "https://support.apple.com/HT208221", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.debian.org/security/2017/dsa-3971", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/99941", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securitytracker.com/id/1039307", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://access.redhat.com/errata/RHEA-2018:0705", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Exploit", "Third Party Advisory", ], url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://security.gentoo.org/glsa/201709-23", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://support.apple.com/HT208221", }, ], sourceIdentifier: "cve@mitre.org", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-125", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
gsd-2017-11541
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
Aliases
Aliases
{ GSD: { alias: "CVE-2017-11541", description: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", id: "GSD-2017-11541", references: [ "https://www.suse.com/security/cve/CVE-2017-11541.html", "https://www.debian.org/security/2017/dsa-3971", "https://access.redhat.com/errata/RHEA-2018:0705", "https://ubuntu.com/security/CVE-2017-11541", "https://advisories.mageia.org/CVE-2017-11541.html", "https://security.archlinux.org/CVE-2017-11541", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2017-11541", ], details: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", id: "GSD-2017-11541", modified: "2023-12-13T01:21:15.310416Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2017-11541", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "GLSA-201709-23", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201709-23", }, { name: "https://support.apple.com/HT208221", refsource: "CONFIRM", url: "https://support.apple.com/HT208221", }, { name: "DSA-3971", refsource: "DEBIAN", url: "http://www.debian.org/security/2017/dsa-3971", }, { name: "1039307", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1039307", }, { name: "99941", refsource: "BID", url: "http://www.securityfocus.com/bid/99941", }, { name: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print", refsource: "MISC", url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print", }, { name: "RHEA-2018:0705", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], }, }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2017-11541", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-125", }, ], }, ], }, references: { reference_data: [ { name: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print", refsource: "MISC", tags: [ "Exploit", "Third Party Advisory", ], url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print", }, { name: "99941", refsource: "BID", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/99941", }, { name: "1039307", refsource: "SECTRACK", tags: [], url: "http://www.securitytracker.com/id/1039307", }, { name: "GLSA-201709-23", refsource: "GENTOO", tags: [], url: "https://security.gentoo.org/glsa/201709-23", }, { name: "DSA-3971", refsource: "DEBIAN", tags: [], url: "http://www.debian.org/security/2017/dsa-3971", }, { name: "https://support.apple.com/HT208221", refsource: "CONFIRM", tags: [], url: "https://support.apple.com/HT208221", }, { name: "RHEA-2018:0705", refsource: "REDHAT", tags: [], url: "https://access.redhat.com/errata/RHEA-2018:0705", }, ], }, }, impact: { baseMetricV2: { acInsufInfo: true, cvssV2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 7.5, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 6.4, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "HIGH", userInteractionRequired: false, }, baseMetricV3: { cvssV3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, exploitabilityScore: 3.9, impactScore: 5.9, }, }, lastModifiedDate: "2019-10-03T00:03Z", publishedDate: "2017-07-23T03:29Z", }, }, }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.