Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2018-16227

UNKNOWN
Published 2019-10-03T15:44:35
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2018-16227. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed MODERATE

GHSA-xhqj-2888-hjrx

Advisory Details

The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.

CVSS Scoring

CVSS Score

5.0

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2018-16227
WEB https://github.com/the-tcpdump-group/tcpdump/commit/4846b3c5d0a850e860baf4f07340495d29837d09
WEB https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES
WEB https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html
WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN
WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN
WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU
WEB https://seclists.org/bugtraq/2019/Dec/23
WEB https://seclists.org/bugtraq/2019/Oct/28
WEB https://security.netapp.com/advisory/ntap-20200120-0001
WEB https://support.apple.com/kb/HT210788
WEB https://www.debian.org/security/2019/dsa-4547
WEB http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html
WEB http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html
WEB http://seclists.org/fulldisclosure/2019/Dec/26

Advisory provided by GitHub Security Advisory Database. Published: May 24, 2022, Modified: May 24, 2022

References

https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES
https://github.com/the-tcpdump-group/tcpdump/commit/4846b3c5d0a850e860baf4f07340495d29837d09
https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html
https://seclists.org/bugtraq/2019/Oct/28
https://www.debian.org/security/2019/dsa-4547
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/
https://support.apple.com/kb/HT210788
https://seclists.org/bugtraq/2019/Dec/23
http://seclists.org/fulldisclosure/2019/Dec/26
https://security.netapp.com/advisory/ntap-20200120-0001/
https://usn.ubuntu.com/4252-2/
https://usn.ubuntu.com/4252-1/

HackerOne Reports

Tcpdump before 4.9.3 has a buffer over-read in print-802_11.c (CVE-2018-16227) Critical
bugbasher
Internet Bug Bounty
Out-of-bounds Read
View Report
Published: 2019-10-03T15:44:35
Last Modified: 2024-08-05T10:17:38.377Z
Copied to clipboard!