Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2016-8574 Details

The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15_print().

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://access.redhat.com/errata/RHSA-2017:1871	CVE
https://security.gentoo.org/glsa/201702-30	CVE
https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html	CVE
http://www.debian.org/security/2017/dsa-3775	CVE
http://www.securityfocus.com/bid/95852	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1037755	CVE
https://access.redhat.com/errata/RHSA-2017:1871	[email protected]
https://security.gentoo.org/glsa/201702-30	[email protected]
https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html	[email protected]
http://www.debian.org/security/2017/dsa-3775	[email protected]
http://www.securityfocus.com/bid/95852	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1037755	[email protected]

CWE-ID	CWE Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	[email protected]

Product	Versions
tcpdump tcpdump	<= 4.8.1
CPE cpe:2.3:a:tcpdump:tcpdump:::::::: Remediation No remediation found in references.

11 change records found show changes

QUICK INFO