Multiple vulnerabilities have been found in Tcpdump, the worst of which may allow execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/tcpdump | * | < 4.9.2 | >= 4.9.2 |
Tcpdump is a tool for network monitoring and data acquisition.
Multiple vulnerabilities have been discovered in Tcpdump. Please review the referenced CVE identifiers for details.
A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All Tcpdump users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/tcpdump-4.9.2"
Multiple vulnerabilities have been found in tcpdump, the worst of which may allow execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/tcpdump | * | < 4.9.0 | >= 4.9.0 |
tcpdump is a tool for network monitoring and data acquisition.
Multiple vulnerabilities have been discovered in tcpdump. Please review the CVE identifiers referenced below for details.
A remote attacker, by sending a specially crafted network package, could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All tcpdump users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/tcpdump-4.9.0"
Multiple vulnerabilities have been found in tcpdump, the worst of which can allow remote attackers to cause Denial of Service condition or executive arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/tcpdump | * | < 4.7.4 | >= 4.7.4 |
tcpdump is a Tool for network monitoring and data acquisition.
Multiple vulnerabilities have been discovered in tcpdump. Please review the CVE identifiers referenced below for details.
A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.
There is no known workaround at this time.
All tcpdump users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/tcpdump-4.7.4"
Multiple vulnerabilities in tcpdump could result in execution of arbitrary code or Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/tcpdump | * | < 4.6.2-r1 | >= 4.6.2-r1 |
tcpdump is a tool for capturing and inspecting network traffic.
Multiple vulnerabilities have been discovered in tcpdump:
A remote attacker may be able to send a specially crafted packet, possibly resulting in execution of arbitrary code or a Denial of Service condition.
There is no known workaround at this time.
All tcpdump users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/tcpdump-4.6.2-r1"
A vulnerability has been discovered in tcpdump, allowing for the execution of arbitrary code, possibly with root privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/tcpdump | * | < 3.9.5-r3 | >= 3.9.5-r3 |
tcpdump is a tool for capturing and inspecting network traffic.
mu-b from Digital Labs discovered that the return value of a snprintf() call is not properly checked before being used. This could lead to an integer overflow.
A remote attacker could send specially crafted BGP packets on a network being monitored with tcpdump, possibly resulting in the execution of arbitrary code with the privileges of the user running tcpdump, which is usually root.
There is no known workaround at this time.
All tcpdump users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/tcpdump-3.9.5-r3"
A flaw in the decoding of network packets renders TCPDump vulnerable to a remote Denial of Service attack.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/tcpdump | * | < 3.8.3-r3 | >= 3.8.3-r3 |
TCPDump is a tool for network monitoring and data acquisition.
TCPDump improperly handles and decodes ISIS (CAN-2005-1278), BGP (CAN-2005-1267, CAN-2005-1279), LDP (CAN-2005-1279) and RSVP (CAN-2005-1280) packets. TCPDump might loop endlessly after receiving malformed packets.
A malicious remote attacker can exploit the decoding issues for a Denial of Service attack by sending specially crafted packets, possibly causing TCPDump to loop endlessly.
There is no known workaround at this time.
All TCPDump users should upgrade to the latest available version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/tcpdump-3.8.3-r3"
There are multiple vulnerabilities in tcpdump and libpcap related to parsing of ISAKMP packets.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/tcpdump | * | <= 3.8.1 | >= 3.8.3-r1 |
| net-libs/libpcap | * | <= 0.8.1-r1 | >= 0.8.3-r1 |
Tcpdump is a program for monitoring IP network traffic. Libpcap is a supporting library which is responsibile for capturing packets off a network interface.
There are two specific vulnerabilities in tcpdump, outlined in [ reference 1 ]. In the first scenario, an attacker may send a specially-crafted ISAKMP Delete packet which causes tcpdump to read past the end of its buffer. In the second scenario, an attacker may send an ISAKMP packet with the wrong payload length, again causing tcpdump to read past the end of a buffer.
Remote attackers could potentially cause tcpdump to crash or execute arbitrary code as the 'pcap' user.
There is no known workaround at this time. All tcpdump users are encouraged to upgrade to the latest available version.
All tcpdump users should upgrade to the latest available version. ADDITIONALLY, the net-libs/libpcap package should be upgraded.
# emerge sync # emerge -pv ">=net-libs/libpcap-0.8.3-r1" ">=net-analyzer/tcpdump-3.8.3-r1" # emerge ">=net-libs/libpcap-0.8.3-r1" ">=net-analyzer/tcpdump-3.8.3-r1"