Most recent entries from all

ALSA-2021:4236 — Low: tcpdump security and bug fix update

Affected: AlmaLinux:8: tcpdump

The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.

Security Fix(es):

* tcpdump: ppp decapsulator can be convinced to allocate a large amount of memory (CVE-2020-8037)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Withdrawn: BELL-CVE-2020-8037 — CVE-2020-8037 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2021-avi-314 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu…

certfr-2021-avi-314

EUVD-2026-171879

fkie_cve-2020-8037

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.

GHSA-qggh-75q9-j3rf

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.

gsd-2020-8037

msrc_CVE-2020-8037 — ppp decapsulator can be convinced to allocate a large amount of memory

msrc_CVE-2020-8037

openSUSE-SU-2020:1983-1 — Security update for tcpdump

Security update for tcpdump

SUSE-SU-2020:3358-1 — Security update for tcpdump

Security update for tcpdump

UBUNTU-CVE-2020-8037

Affected: Ubuntu:Pro:14.04:LTS: tcpdump, Ubuntu:Pro:16.04:LTS: tcpdump, Ubuntu:18.04:LTS: tcpdump, Ubuntu:20.04:LTS: tcpdump

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.

WID-SEC-W-2022-0571 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Dateien zu manipulieren und einen nicht spezifizierten Angriff durchzuführen.