CVE-2018-16300

Description

The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion.

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.28

Vulnerability	OS Platform
Multiple vulnerabilities are fixed in MacOS Catalina 10.15.2	Mac
Multiple vulnerabilities are fixed in MacOS Catalina 10.15.2 Combo Update	Mac
tcpdump security update(DSA-4547-1) tcpdump_4.9.3-1~deb9u1_i386.deb	Linux
tcpdump security update(DSA-4547-1) tcpdump_4.9.3-1~deb9u1_amd64.deb	Linux
tcpdump security update(DSA-4547-1) tcpdump_4.9.3-1~deb10u1_amd64.deb	Linux
command-line network traffic analyzer (USN-4252-1) tcpdump_4.9.3-0ubuntu0.16.04.1_i386.deb	Linux
command-line network traffic analyzer (USN-4252-1) tcpdump_4.9.3-0ubuntu0.16.04.1_amd64.deb	Linux
command-line network traffic analyzer (USN-4252-1) tcpdump_4.9.3-0ubuntu0.18.04.1_i386.deb	Linux
command-line network traffic analyzer (USN-4252-1) tcpdump_4.9.3-0ubuntu0.18.04.1_amd64.deb	Linux
(RHSA-2020:4760) tcpdump security, bug fix, and enhancement update tcpdump-4.9.3-1.el8.x86_64.rpm	Linux
(RHSA-2020:4760) tcpdump security, bug fix, and enhancement update tcpdump-debugsource-4.9.3-1.el8.x86_64.rpm	Linux
SUSE-SU-2020:3360-1(SUSE Linux Enterprise Server 12-SP5 ) tcpdump-4.9.2-14.17.1.x86_64.rpm	Linux
SUSE-SU-2020:3360-1(SUSE Linux Enterprise Server 12-SP5 ) tcpdump-debuginfo-4.9.2-14.17.1.x86_64.rpm	Linux
SUSE-SU-2020:3360-1(SUSE Linux Enterprise Server 12-SP5 ) tcpdump-debugsource-4.9.2-14.17.1.x86_64.rpm	Linux
Uncontrolled Recursion Vulnerability (CVE-2018-16300)	NCM

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-602673	MacOS Catalina 10.15.7 - Auto Reboot
PATCH-602674	macOS Catalina 10.15.7 Combo Update - Auto Reboot