CVE-2018-16227

tcpdump: Buffer over-read in print-802_11.c

Published Oct 3, 2019 CVSS 3.1 · 7.5 High EPSS 6.8% KEV · Not listed
Description
The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-1955-1 tcpdump security update
Debian DSA Debian DSA DSA-4547-1 tcpdump security update
EUVD EUVD EUVD-2018-8079 The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.
Ubuntu USN Ubuntu USN USN-4252-1 tcpdump vulnerabilities
Ubuntu USN Ubuntu USN USN-4252-2 tcpdump vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.15083}

epss

{'score': 0.16057}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 10:17 AM
Reserved
Aug 30, 2018, 12:00 AM
Status
Modified
Published
Oct 3, 2019, 4:15 PM
Modified
Jun 17, 2026, 1:43 AM
Severity
Low
Public date
Oct 2, 2019, 12:00 AM