CVE-2018-14463

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.

References

Affected packages

Git / github.com/the-tcpdump-group/tcpdump

Affected ranges

Type: GIT
Repo: https://github.com/the-tcpdump-group/tcpdump
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

3de07c772166b7e8e8bb4b9d1d078f1d901b570b

Affected versions

tcpdump-3.*

tcpdump-3.5.1

tcpdump-3.6.1

tcpdump-3.7.1

tcpdump-3.8-bp

tcpdump-4.*

tcpdump-4.5.0

tcpdump-4.6.0

tcpdump-4.6.0-bp

tcpdump-4.7.0-bp

tcpdump-4.9.0

tcpdump-4.9.0-bp

tcpdump-4.9.1

tcpdump-4.9.2

Database specific

vanir_signatures

[
    {
        "signature_version": "v1",
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/3de07c772166b7e8e8bb4b9d1d078f1d901b570b",
        "digest": {
            "line_hashes": [
                "39939124648152059879705981226743753295",
                "20007365107961517182145415366155445481",
                "90333356603117258625778014936535901441",
                "103249487416849765110035107509580424921",
                "278145580656658044761895426722562154732",
                "34698054518958180091667493468576452902"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "print-vrrp.c"
        },
        "id": "CVE-2018-14463-666322ef",
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/3de07c772166b7e8e8bb4b9d1d078f1d901b570b",
        "digest": {
            "function_hash": "266056734173729437688808515457093073218",
            "length": 2169.0
        },
        "target": {
            "function": "vrrp_print",
            "file": "print-vrrp.c"
        },
        "id": "CVE-2018-14463-b46e8910",
        "deprecated": false,
        "signature_type": "Function"
    }
]