New libpcap and tcpdump packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.

This update for tcpdump fixes the following issues :

  - CVE-2017-16808: Fixed a heap-based buffer over-read     related to aoe_print and lookup_emem (bsc#1068716     bsc#1153098).

  - CVE-2018-10103: Fixed a mishandling of the printing of     SMB data (bsc#1153098).

  - CVE-2018-10105: Fixed a mishandling of the printing of     SMB data (bsc#1153098).

  - CVE-2018-14461: Fixed a buffer over-read in     print-ldp.c:ldp_tlv_print (bsc#1153098).

  - CVE-2018-14462: Fixed a buffer over-read in     print-icmp.c:icmp_print (bsc#1153098).

  - CVE-2018-14463: Fixed a buffer over-read in     print-vrrp.c:vrrp_print (bsc#1153098).

  - CVE-2018-14464: Fixed a buffer over-read in     print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098).

  - CVE-2018-14465: Fixed a buffer over-read in     print-rsvp.c:rsvp_obj_print (bsc#1153098).

  - CVE-2018-14466: Fixed a buffer over-read in     print-rx.c:rx_cache_find (bsc#1153098).

  - CVE-2018-14467: Fixed a buffer over-read in     print-bgp.c:bgp_capabilities_print (bsc#1153098).

  - CVE-2018-14468: Fixed a buffer over-read in     print-fr.c:mfr_print (bsc#1153098).

  - CVE-2018-14469: Fixed a buffer over-read in     print-isakmp.c:ikev1_n_print (bsc#1153098).

  - CVE-2018-14470: Fixed a buffer over-read in     print-babel.c:babel_print_v2 (bsc#1153098).

  - CVE-2018-14879: Fixed a buffer overflow in the     command-line argument parser (bsc#1153098).

  - CVE-2018-14880: Fixed a buffer over-read in the OSPFv3     parser (bsc#1153098).

  - CVE-2018-14881: Fixed a buffer over-read in the BGP     parser (bsc#1153098).

  - CVE-2018-14882: Fixed a buffer over-read in the ICMPv6     parser (bsc#1153098).

  - CVE-2018-16227: Fixed a buffer over-read in the IEEE     802.11 parser in print-802_11.c for the Mesh Flags     subfield (bsc#1153098).

  - CVE-2018-16228: Fixed a buffer over-read in the HNCP     parser (bsc#1153098).

  - CVE-2018-16229: Fixed a buffer over-read in the DCCP     parser (bsc#1153098).

  - CVE-2018-16230: Fixed a buffer over-read in the BGP     parser in print-bgp.c:bgp_attr_print (bsc#1153098).

  - CVE-2018-16300: Fixed an unlimited recursion in the BGP     parser that allowed denial-of-service by stack     consumption (bsc#1153098).

  - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332     bsc#1153098).

  - CVE-2018-16451: Fixed several buffer over-reads in     print-smb.c:print_trans() for \MAILSLOT\BROWSE and     \PIPE\LANMAN (bsc#1153098).

  - CVE-2018-16452: Fixed a stack exhaustion in     smbutil.c:smb_fdata (bsc#1153098).

  - CVE-2019-15166: Fixed a bounds check in     lmp_print_data_link_subobjs (bsc#1153098).

  - CVE-2019-15167: Fixed a vulnerability in VRRP     (bsc#1153098).

This update was imported from the SUSE:SLE-15:Update update project.

New version 4.9.3, Security fix for CVE-2017-16808, CVE-2018-14468, CVE-2018-14469, CVE-2018-14470, CVE-2018-14466, CVE-2018-14461, CVE-2018-14462, CVE-2018-14465, CVE-2018-14881, CVE-2018-14464, CVE-2018-14463, CVE-2018-14467, CVE-2018-10103, CVE-2018-10105, CVE-2018-14880, CVE-2018-16451, CVE-2018-14882, CVE-2018-16227, CVE-2018-16229, CVE-2018-16301, CVE-2018-16230, CVE-2018-16452, CVE-2018-16300, CVE-2018-16228, CVE-2019-15166, CVE-2019-15167, CVE-2017-16808, CVE-2018-14882, CVE-2018-19519

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
129521	Slackware 14.0 / 14.1 / 14.2 / current : tcpdump (SSA:2019-274-01)	Nessus	Slackware Local Security Checks	2019/10/2	2024/4/22	critical
130086	openSUSE Security Update : tcpdump (openSUSE-2019-2348)	Nessus	SuSE Local Security Checks	2019/10/21	2024/4/17	critical
130321	Fedora 30 : 14:tcpdump (2019-d06bc63433)	Nessus	Fedora Local Security Checks	2019/10/28	2024/4/16	critical

检测

插件搜索

critical

critical

critical