Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2018-14879

UNKNOWN
Published 2019-10-03T15:33:33
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2018-14879. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed MODERATE

GHSA-x5g3-55pg-9g4m

Advisory Details

The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().

CVSS Scoring

CVSS Score

5.0

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2018-14879
WEB https://github.com/the-tcpdump-group/tcpdump/commit/9ba91381954ad325ea4fd26b9c65a8bd9a2a85b6
WEB https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES
WEB https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html
WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN
WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN
WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU
WEB https://seclists.org/bugtraq/2019/Dec/23
WEB https://seclists.org/bugtraq/2019/Oct/28
WEB https://security.netapp.com/advisory/ntap-20200120-0001
WEB https://support.apple.com/kb/HT210788
WEB https://support.f5.com/csp/article/K51512510?utm_source=f5support&utm_medium=RSS
WEB https://usn.ubuntu.com/4252-1
WEB https://usn.ubuntu.com/4252-2
WEB https://www.debian.org/security/2019/dsa-4547
WEB http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html
WEB http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html
WEB http://seclists.org/fulldisclosure/2019/Dec/26

Advisory provided by GitHub Security Advisory Database. Published: May 24, 2022, Modified: August 16, 2023

References

https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES
https://github.com/the-tcpdump-group/tcpdump/commit/9ba91381954ad325ea4fd26b9c65a8bd9a2a85b6
https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html
https://seclists.org/bugtraq/2019/Oct/28
https://www.debian.org/security/2019/dsa-4547
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/
https://support.f5.com/csp/article/K51512510?utm_source=f5support&amp%3Butm_medium=RSS
https://support.apple.com/kb/HT210788
https://seclists.org/bugtraq/2019/Dec/23
http://seclists.org/fulldisclosure/2019/Dec/26
https://security.netapp.com/advisory/ntap-20200120-0001/
https://usn.ubuntu.com/4252-2/
https://usn.ubuntu.com/4252-1/

HackerOne Reports

tcpdump: CVE-2018-14879 - buffer overflow in tcpdump.c:get_next_file() Critical
geeknik
Internet Bug Bounty
Buffer Underflow
View Report
Published: 2019-10-03T15:33:33
Last Modified: 2024-08-05T09:46:23.862Z
Copied to clipboard!