CVE-2018-14879

Description

The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().

Base Score

7.0

MODERATE

Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.52

Vulnerability	OS Platform
Multiple vulnerabilities are fixed in MacOS Catalina 10.15.2	Mac
Multiple vulnerabilities are fixed in MacOS Catalina 10.15.2 Combo Update	Mac
tcpdump security update(DSA-4547-1) tcpdump_4.9.3-1~deb9u1_i386.deb	Linux
tcpdump security update(DSA-4547-1) tcpdump_4.9.3-1~deb9u1_amd64.deb	Linux
tcpdump security update(DSA-4547-1) tcpdump_4.9.3-1~deb10u1_amd64.deb	Linux
command-line network traffic analyzer (USN-4252-1) tcpdump_4.9.3-0ubuntu0.16.04.1_i386.deb	Linux
command-line network traffic analyzer (USN-4252-1) tcpdump_4.9.3-0ubuntu0.16.04.1_amd64.deb	Linux
command-line network traffic analyzer (USN-4252-1) tcpdump_4.9.3-0ubuntu0.18.04.1_i386.deb	Linux
command-line network traffic analyzer (USN-4252-1) tcpdump_4.9.3-0ubuntu0.18.04.1_amd64.deb	Linux
(RHSA-2020:4760) tcpdump security, bug fix, and enhancement update tcpdump-4.9.3-1.el8.x86_64.rpm	Linux
(RHSA-2020:4760) tcpdump security, bug fix, and enhancement update tcpdump-debugsource-4.9.3-1.el8.x86_64.rpm	Linux
SUSE-SU-2020:3360-1(SUSE Linux Enterprise Server 12-SP5 ) tcpdump-4.9.2-14.17.1.x86_64.rpm	Linux
SUSE-SU-2020:3360-1(SUSE Linux Enterprise Server 12-SP5 ) tcpdump-debuginfo-4.9.2-14.17.1.x86_64.rpm	Linux
SUSE-SU-2020:3360-1(SUSE Linux Enterprise Server 12-SP5 ) tcpdump-debugsource-4.9.2-14.17.1.x86_64.rpm	Linux
Buffer Copy without Checking Size of Input (Classic Buffer Overflow) Vulnerability (CVE-2018-14879)	NCM

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-602673	MacOS Catalina 10.15.7 - Auto Reboot
PATCH-602674	macOS Catalina 10.15.7 Combo Update - Auto Reboot