cbcvebase.
CVE-2018-14879
published 2019-10-03

CVE-2018-14879: The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().

high7CVSS 3.1
AVLACHPRNUIRSUCHIHAH
The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().

Affected

19 ranges
VendorProductVersion rangeFixed in
applemac_os_x< 10.15.210.15.2
applemacos_catalina_10.15.2_security_update_2019-002_mojave_security_update_2019-007
debiandebian_linux
debiandebian_linux
debiandebian_linux
debiantcpdump< tcpdump 4.9.3-1 (bookworm)tcpdump 4.9.3-1 (bookworm)
f5traffix_signaling_delivery_controller5.0.0 – 5.1.0
fedoraprojectfedora
fedoraprojectfedora
fedoraprojectfedora
opensuseleap
opensuseleap
redhatenterprise_linux
redhatenterprise_linux
tcpdumptcpdump< 4.9.34.9.3
tcpdumptcpdump>= 0 < 4.9.3-14.9.3-1
tcpdumptcpdump>= 0 < 4.9.3-14.9.3-1
tcpdumptcpdump>= 0 < 4.9.3-14.9.3-1
tcpdumptcpdump>= 0 < 4.9.3-14.9.3-1

CVSS provenance

nvdv3.17.0HIGHCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.0HIGH