diff options
| author | Hauke Mehrtens <hauke@hauke-m.de> | 2022-02-12 23:13:47 +0100 |
|---|---|---|
| committer | Hauke Mehrtens <hauke@hauke-m.de> | 2022-02-13 00:23:30 +0100 |
| commit | 59e7ae8d65ab9a9315608a69565f6a4247d3b1ac (patch) | |
| tree | af073d54614a6d329462a0b8b817e3d48de65578 /COPYING | |
| parent | de948a0bce56c809864b2251be741b7e07a822d0 (diff) | |
| download | upstream-59e7ae8d65ab9a9315608a69565f6a4247d3b1ac.tar.gz upstream-59e7ae8d65ab9a9315608a69565f6a4247d3b1ac.tar.bz2 upstream-59e7ae8d65ab9a9315608a69565f6a4247d3b1ac.zip | |
tcpdump: Fix CVE-2018-16301
This fixes the following security problem:
The command-line argument parser in tcpdump before 4.99.0 has a buffer
overflow in tcpdump.c:read_infile(). To trigger this vulnerability the
attacker needs to create a 4GB file on the local filesystem and to
specify the file name as the value of the -F command-line argument of
tcpdump.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 8f5875c4e221453932f217a82f8c3092cacba3e5)
Diffstat (limited to 'COPYING')
0 files changed, 0 insertions, 0 deletions