UBUNTU-CVE-2018-19519

Details

In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.

Affected Packages

tcpdump

Ubuntu 16.04 LTS

Fixed in:

4.9.3-0ubuntu0.16.04.1

tcpdump

Ubuntu 18.04 LTS

Fixed in:

4.9.3-0ubuntu0.18.04.1

tcpdump

Ubuntu Pro 14.04 LTS

Fixed in:

4.9.3-0ubuntu0.14.04.1+esm1

References

REPORT

https://github.com/zyingp/temp/blob/master/tcpdump.md

REPORT

https://ubuntu.com/security/CVE-2018-19519

ADVISORY

https://ubuntu.com/security/notices/USN-4252-1

ADVISORY

https://ubuntu.com/security/notices/USN-4252-2

REPORT

https://www.cve.org/CVERecord?id=CVE-2018-19519