Debian/tcpdump: critical 9.8
The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().
Action: Upgrade tcpdump to 4.9.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.9.2-1 | - |
Fixed versions
| 4.9.2-1 |
Sources
- osv: DEBIAN-CVE-2017-13031#Debian:14/tcpdump
- https://security-tracker.debian.org/tracker/CVE-2017-13031
published · modified · JSON