{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2017-07-22T00:00:00", "descriptions": [{"lang": "en", "value": "tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-05-16T09:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "GLSA-201709-23", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "https://security.gentoo.org/glsa/201709-23"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.apple.com/HT208221"}, {"name": "DSA-3971", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2017/dsa-3971"}, {"name": "1039307", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1039307"}, {"name": "99939", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/99939"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/global-overflow/print-sl"}, {"name": "RHEA-2018:0705", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHEA-2018:0705"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-11543", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "GLSA-201709-23", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201709-23"}, {"name": "https://support.apple.com/HT208221", "refsource": "CONFIRM", "url": "https://support.apple.com/HT208221"}, {"name": "DSA-3971", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2017/dsa-3971"}, {"name": "1039307", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1039307"}, {"name": "99939", "refsource": "BID", "url": "http://www.securityfocus.com/bid/99939"}, {"name": "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/global-overflow/print-sl", "refsource": "MISC", "url": "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/global-overflow/print-sl"}, {"name": "RHEA-2018:0705", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHEA-2018:0705"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T18:12:40.233Z"}, "title": "CVE Program Container", "references": [{"name": "GLSA-201709-23", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "https://security.gentoo.org/glsa/201709-23"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://support.apple.com/HT208221"}, {"name": "DSA-3971", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2017/dsa-3971"}, {"name": "1039307", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1039307"}, {"name": "99939", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/99939"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/global-overflow/print-sl"}, {"name": "RHEA-2018:0705", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://access.redhat.com/errata/RHEA-2018:0705"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2017-11543", "datePublished": "2017-07-23T03:00:00", "dateReserved": "2017-07-22T00:00:00", "dateUpdated": "2024-08-05T18:12:40.233Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "A6BE599F-A3FF-402C-A2C8-119B5E81CE8C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c."}, {"lang": "es", "value": "tcpdump 4.9.0 presenta un desbordamiento de b\u00fafer en la funci\u00f3n sliplink_print en print-sl.c."}], "id": "CVE-2017-11543", "lastModified": "2018-05-17T01:29:01.347", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-07-23T03:29:00.877", "references": [{"source": "cve@mitre.org", "url": "http://www.debian.org/security/2017/dsa-3971"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/99939"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id/1039307"}, {"source": "cve@mitre.org", "url": "https://access.redhat.com/errata/RHEA-2018:0705"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/global-overflow/print-sl"}, {"source": "cve@mitre.org", "url": "https://security.gentoo.org/glsa/201709-23"}, {"source": "cve@mitre.org", "url": "https://support.apple.com/HT208221"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHEA-2018:0705", "cpe": "cpe:/o:redhat:enterprise_linux:7", "package": "tcpdump-14:4.9.2-3.el7", "product_name": "Red Hat Enterprise Linux 7", "release_date": "2018-04-10T00:00:00Z"}], "bugzilla": {"description": "tcpdump: buffer overflow in the sliplink_print function", "id": "1475358", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1475358"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "status": "verified"}, "cwe": "CWE-787", "details": ["tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.", "A vulnerability was discovered in tcpdump's handling of LINKTYPE_SLIP pcap files. An attacker could craft a malicious pcap file that would cause tcpdump to crash when attempting to print a summary of packet data within the file."], "name": "CVE-2017-11543", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Will not fix", "package_name": "tcpdump", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Will not fix", "package_name": "tcpdump", "product_name": "Red Hat Enterprise Linux 6"}], "public_date": "2017-07-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2017-11543\nhttps://nvd.nist.gov/vuln/detail/CVE-2017-11543"], "statement": "Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "threat_severity": "Low"}