Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2018-14467: tcpdump may read extra data when handling BGP traffic
CVE-2018-14467 · published 7 years ago
Summary
The BGP processing code in tcpdump versions before 4.9.3 can read past the intended memory area, which could cause the program to crash or behave unexpectedly. This affects systems using tcpdump on macOS, Debian, Fedora, and openSUSE Leap. Upgrade tcpdump to version 4.9.3 or later to resolve the issue.
What to do
- Update tcpdump tcpdump to version 4.9.3 or later.
- Update apple mac_os_x to version 10.15.2 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| tcpdump | tcpdump |
< 4.9.3 cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:* |
| apple | mac_os_x |
< 10.15.2 cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* |
| debian | debian_linux |
8.0 9.0 10.0 cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
| fedoraproject | fedora |
29 30 31 cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* |
| opensuse | leap |
15.0 15.1 cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* |
| redhat | enterprise_linux |
7.0 8.0 cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* |
Original advisory text
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).
References
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html Third Party Advisory
- https://security.netapp.com/advisory/ntap-20200120-0001/
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Dec/26 Mailing List Third Party Advisory
- https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES Release Notes Third Party Advisory
- https://github.com/the-tcpdump-group/tcpdump/commit/e3f3b445e2d20ac5d5b7fcb7559c... Patch Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...
- https://seclists.org/bugtraq/2019/Dec/23 Mailing List Third Party Advisory
- https://seclists.org/bugtraq/2019/Oct/28 Mailing List Third Party Advisory
- https://support.apple.com/kb/HT210788 Third Party Advisory
- https://usn.ubuntu.com/4252-1/
- https://usn.ubuntu.com/4252-2/
- https://www.debian.org/security/2019/dsa-4547 Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-125Out-of-bounds Read
Timeline
Published3 Oct 2019
Updated24 Oct 2026
First seen29 Sep 2026
Sources
CVE-2018-14467 · NVD
Track software like this
Free during beta