CVE-2018-14881 PUBLISHED

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).

EPSS 1.52% · 81.1th percentile

Risk Scores

EPSS Score
1.52%
81.1th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTStcpdump0, 4.7.4-1ubuntu1, 4.9.0-1ubuntu1~ubuntu16.04.1
Ubuntu:Pro:14.04:LTStcpdump4.9.0-1ubuntu1~ubuntu14.04.1, 4.4.0-1ubuntu1, 4.9.2-0ubuntu0.14.04.1
Ubuntu:18.04:LTStcpdump4.9.2-1, 4.9.2-2, 4.9.2-2build1

Timeline

References

Open in Interactive Console →