NetSight
IP …
high7.5

CVE-2018-14880

The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().

Impact

The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().

Affected products

VendorProductAffected versions
TcpdumpTcpdump
before 4.9.3
AppleMac Os X
before 10.15.2
DebianDebian Linux
Versions 8.0, 9.0, 10.0
FedoraprojectFedora
Versions 29, 30, 31
OpensuseLeap
Versions 15.0, 15.1
RedhatEnterprise Linux
Versions 7.0, 8.0
F5Big-Iq Centralized Management
from 5.2.0 through 5.4.0
from 6.0.0 through 6.1.0
Version 7.0.0
F5Big-Ip Access Policy Manager
from 11.5.2 through 11.6.5
from 12.1.0 through 12.1.5
from 13.1.0 through 13.1.3
from 14.0.0 through 14.1.2
from 15.0.0 through 15.0.1
F5Big-Ip Advanced Firewall Manager
from 11.5.2 through 11.6.5
from 12.1.0 through 12.1.5
from 13.1.0 through 13.1.3
from 14.0.0 through 14.1.2
from 15.0.0 through 15.0.1
F5Big-Ip Analytics
from 11.5.2 through 11.6.5
from 12.1.0 through 12.1.5
from 13.1.0 through 13.1.3
from 14.0.0 through 14.1.2
from 15.0.0 through 15.0.1
F5Big-Ip Application Acceleration Manager
from 11.5.2 through 11.6.5
from 12.1.0 through 12.1.5
from 13.1.0 through 13.1.3
from 14.0.0 through 14.1.2
from 15.0.0 through 15.0.1
F5Big-Ip Application Security Manager
from 11.5.2 through 11.6.5
from 12.1.0 through 12.1.5
from 13.1.0 through 13.1.3
from 14.0.0 through 14.1.2
from 15.0.0 through 15.0.1

Weakness classification

CWE-125

References