tocsin

Alpine/tcpdump: high 7.5

tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called

Action: Upgrade tcpdump to 4.9.1-r0 or later.

Affected

introducedfixedlast affected
04.9.1-r0-

Fixed versions

4.9.1-r0

Sources

published · modified · JSON