Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2018-16229

UNKNOWN
Published 2019-10-03T15:48:05
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2018-16229. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed MODERATE

GHSA-6c2x-hfpw-ppfx

Advisory Details

The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().

CVSS Scoring

CVSS Score

5.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2018-16229
WEB https://github.com/the-tcpdump-group/tcpdump/commit/211124b972e74f0da66bc8b16f181f78793e2f66
WEB https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES
WEB https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html
WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN
WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN
WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU
WEB https://seclists.org/bugtraq/2019/Dec/23
WEB https://seclists.org/bugtraq/2019/Oct/28
WEB https://security.netapp.com/advisory/ntap-20200120-0001
WEB https://support.apple.com/kb/HT210788
WEB https://usn.ubuntu.com/4252-1
WEB https://usn.ubuntu.com/4252-2
WEB https://www.debian.org/security/2019/dsa-4547
WEB http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html
WEB http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html
WEB http://seclists.org/fulldisclosure/2019/Dec/26

Advisory provided by GitHub Security Advisory Database. Published: May 24, 2022, Modified: August 16, 2023

References

https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES
https://github.com/the-tcpdump-group/tcpdump/commit/211124b972e74f0da66bc8b16f181f78793e2f66
https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html
https://seclists.org/bugtraq/2019/Oct/28
https://www.debian.org/security/2019/dsa-4547
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/
https://support.apple.com/kb/HT210788
https://seclists.org/bugtraq/2019/Dec/23
http://seclists.org/fulldisclosure/2019/Dec/26
https://security.netapp.com/advisory/ntap-20200120-0001/
https://usn.ubuntu.com/4252-2/
https://usn.ubuntu.com/4252-1/

HackerOne Reports

Tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option() (CVE-2018-16229) Critical
bugbasher
Internet Bug Bounty
Out-of-bounds Read
View Report
Published: 2019-10-03T15:48:05
Last Modified: 2024-08-05T10:17:38.462Z
Copied to clipboard!