NetSight
IP …
high7.5

CVE-2018-14468

The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().

Impact

The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().

Affected products

VendorProductAffected versions
TcpdumpTcpdump
before 4.9.3
AppleMac Os X
before 10.15.2
DebianDebian Linux
Versions 8.0, 9.0, 10.0
FedoraprojectFedora
Versions 29, 30, 31
OpensuseLeap
Versions 15.0, 15.1
RedhatEnterprise Linux
Versions 7.0, 8.0
F5Big-Iq Centralized Management
from 5.2.0 through 5.4.0
from 6.0.0 through 6.1.0
Version 7.0.0
F5Big-Ip Access Policy Manager
from 11.6.0 through 11.6.5
from 12.1.0 through 12.1.5
from 13.1.0 through 13.1.3
from 14.0.0 through 14.1.2
from 15.0.0 through 15.0.1
F5Big-Ip Advanced Firewall Manager
from 11.6.0 through 11.6.5
from 12.1.0 through 12.1.5
from 13.1.0 through 13.1.3
from 14.0.0 through 14.1.2
from 15.0.0 through 15.0.1
F5Big-Ip Analytics
from 11.6.0 through 11.6.5
from 12.1.0 through 12.1.5
from 13.1.0 through 13.1.3
from 14.0.0 through 14.1.2
from 15.0.0 through 15.0.1
F5Big-Ip Application Acceleration Manager
from 11.6.0 through 11.6.5
from 12.1.0 through 12.1.5
from 13.1.0 through 13.1.3
from 14.0.0 through 14.1.2
from 15.0.0 through 15.0.1
F5Big-Ip Application Security Manager
from 11.6.0 through 11.6.5
from 12.1.0 through 12.1.5
from 13.1.0 through 13.1.3
from 14.0.0 through 14.1.2
from 15.0.0 through 15.0.1

Weakness classification

CWE-125

References