CVE-2018-16227

tcpdump: Buffer over-read in print-802_11.c

Published Oct 3, 2019 CVSS 3.1 · 7.5 High EPSS 6.8% KEV · Not listed
Description
The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-1955-1 tcpdump security update
Debian DSA Debian DSA DSA-4547-1 tcpdump security update
EUVD EUVD EUVD-2018-8079 The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.
Ubuntu USN Ubuntu USN USN-4252-1 tcpdump vulnerabilities
Ubuntu USN Ubuntu USN USN-4252-2 tcpdump vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.15083}

epss

{'score': 0.16057}