According to the version of the tcpdump package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - The ppp decapsulator in tcpdump 4.9.3 can be convinced     to allocate a large amount of memory.(CVE-2020-8037)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6 Security Update 2021-003 Mojave It is, therefore, affected by multiple vulnerabilities, including the following:

  - An application may be able to execute arbitrary code with system privileges due to insufficient permission     checks (CVE-2020-3838).

  - A memory corruption vulnerability could allow an application read access to restricted memory (CVE-2021-1808).

  - A memory corruption vulnerability could allow an application to cause unexpected system termination or to     write kernel memory (CVE-2021-1828).

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

According to the version of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The ppp decapsulator in tcpdump 4.9.3 can be convinced     to allocate a large amount of memory.(CVE-2020-8037)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The ppp de-capsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.

The buffer should be big enough to hold the captured data, but it doesn&rsquo;t need to be big enough to hold the entire on-the-network packet, if we haven&rsquo;t captured all of it.

For Debian 9 stretch, this problem has been fixed in version 4.9.3-1~deb9u2.

We recommend that you upgrade your tcpdump packages.

For the detailed security status of tcpdump please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/tcpdump

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for tcpdump fixes the following issues :

CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size (bsc#1178466).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the tcpdump package has been released.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4236 advisory.

  - The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
    (CVE-2020-8037)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for tcpdump fixes the following issues :

  - CVE-2020-8037: Fixed an issue where PPP decapsulator did     not allocate the right buffer size (bsc#1178466).

This update was imported from the SUSE:SLE-15:Update update project.

Security fix for CVE-2020-8037

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of macOS / Mac OS X that is 10.15.x prior to 10.15.7 Security Update 2021-002 Catalina It is, therefore, affected by multiple vulnerabilities, including the following:

  - An application may be able to execute arbitrary code with system privileges due to insufficient permission     checks (CVE-2020-3838).

  - A memory corruption vulnerability could allow an application read access to restricted memory (CVE-2021-1808).

  - A memory corruption vulnerability could allow an application to cause unexpected system termination or to     write kernel memory (CVE-2021-1828).

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2021:4236 advisory.

  - The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
    (CVE-2020-8037)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for tcpdump fixes the following issues :

CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size (bsc#1178466).

The previous update of tcpdump already fixed variuous Buffer overflow/overread vulnerabilities [bsc#1153098, bsc#1153332]

CVE-2017-16808 (AoE)

CVE-2018-14468 (FrameRelay)

CVE-2018-14469 (IKEv1)

CVE-2018-14470 (BABEL)

CVE-2018-14466 (AFS/RX)

CVE-2018-14461 (LDP)

CVE-2018-14462 (ICMP)

CVE-2018-14465 (RSVP)

CVE-2018-14464 (LMP)

CVE-2019-15166 (LMP)

CVE-2018-14880 (OSPF6)

CVE-2018-14882 (RPL)

CVE-2018-16227 (802.11)

CVE-2018-16229 (DCCP)

CVE-2018-14467 (BGP)

CVE-2018-14881 (BGP)

CVE-2018-16230 (BGP)

CVE-2018-16300 (BGP)

CVE-2018-14463 (VRRP)

CVE-2019-15167 (VRRP)

CVE-2018-14879 (tcpdump -V)

CVE-2018-16228 (HNCP) is a duplicate of the already fixed CVE-2019-1010220

CVE-2018-16301 (fixed in libpcap)

CVE-2018-16451 (SMB)

CVE-2018-16452 (SMB)

CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled)

CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
147091	EulerOS Virtualization for ARM 64 3.0.6.0 : tcpdump (EulerOS-SA-2021-1586)	Nessus	Huawei Local Security Checks	2021/3/4	2024/1/16	high
149043	macOS 10.14.x < 10.14.6 Security Update 2021-003 Mojave (HT212327)	Nessus	MacOS X Local Security Checks	2021/4/28	2024/5/28	critical
143391	EulerOS 2.0 SP9 : tcpdump (EulerOS-SA-2020-2492)	Nessus	Huawei Local Security Checks	2020/12/1	2024/2/7	high
142825	Debian DLA-2444-1 : tcpdump security update	Nessus	Debian Local Security Checks	2020/11/12	2020/11/20	high
143620	SUSE SLED15 / SLES15 Security Update : tcpdump (SUSE-SU-2020:3358-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/6	high
143244	Photon OS 2.0: Tcpdump PHSA-2020-2.0-0297	Nessus	PhotonOS Local Security Checks	2020/11/24	2024/7/23	high
143358	Photon OS 3.0: Tcpdump PHSA-2020-3.0-0165	Nessus	PhotonOS Local Security Checks	2020/11/30	2024/7/23	high
184696	Rocky Linux 8 : tcpdump (RLSA-2021:4236)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/6	high
143060	Photon OS 1.0: Tcpdump PHSA-2020-1.0-0339	Nessus	PhotonOS Local Security Checks	2020/11/19	2020/11/24	high
143192	openSUSE Security Update : tcpdump (openSUSE-2020-1983)	Nessus	SuSE Local Security Checks	2020/11/23	2020/11/25	high
143296	Fedora 33 : 14:tcpdump (2020-fae2e1f2bc)	Nessus	Fedora Local Security Checks	2020/11/30	2024/2/8	high
143389	EulerOS 2.0 SP9 : tcpdump (EulerOS-SA-2020-2505)	Nessus	Huawei Local Security Checks	2020/12/1	2024/2/7	high
143525	Fedora 32 : 14:tcpdump (2020-c5e78886d6)	Nessus	Fedora Local Security Checks	2020/12/7	2024/2/6	high
148070	EulerOS 2.0 SP5 : tcpdump (EulerOS-SA-2021-1708)	Nessus	Huawei Local Security Checks	2021/3/24	2024/1/8	high
149042	macOS 10.15.x < 10.15.7 Security Update 2021-002 Catalina (HT212326)	Nessus	MacOS X Local Security Checks	2021/4/28	2024/5/28	critical
157517	AlmaLinux 8 : tcpdump (ALSA-2021:4236)	Nessus	Alma Linux Local Security Checks	2022/2/9	2022/3/8	high
143787	SUSE SLES12 Security Update : tcpdump (SUSE-SU-2020:3360-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/5	critical

检测

插件搜索

high

critical

high

high

high

high

high

high

high

high

high

high

high

high

critical

high

critical