UBUNTU-CVE-2018-14463

Details

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.

Affected Packages

tcpdump

Ubuntu 16.04 LTS

Fixed in:

4.9.3-0ubuntu0.16.04.1

tcpdump

Ubuntu 18.04 LTS

Fixed in:

4.9.3-0ubuntu0.18.04.1

tcpdump

Ubuntu Pro 14.04 LTS

Fixed in:

4.9.3-0ubuntu0.14.04.1+esm1

References

REPORT

https://ubuntu.com/security/CVE-2018-14463

ADVISORY

https://ubuntu.com/security/notices/USN-4252-1

ADVISORY

https://ubuntu.com/security/notices/USN-4252-2

REPORT

https://www.cve.org/CVERecord?id=CVE-2018-14463

REPORT

https://www.tcpdump.org/tcpdump-changes.txt