CVE:CVE-2018-14468
CNNVD:CNNVD-201910-112
tcpdump是Tcpdump团队的一套运行在命令行下的嗅探工具。该工具主要用于数据包分析和网络流量捕获等。
tcpdump 4.9.3之前版本中的FRF.16解析器的print-fr.c文件中的‘mfr_print()’函数存在缓冲区错误漏洞。远程攻击者可通过发送特制数据利用该漏洞导致应用程序崩溃。
solution:Upgrade tcpdump tcpdump to a higher version than 4.9.3,and avoid the version (,4.9.3); Upgrade apple mac_os_x to a higher version than 10.15.2,and avoid the version (,10.15.2); Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade fedoraproject fedora to a higher version than 29,30,31,and avoid the version 29,30,31; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade f5 big-iq_centralized_management to a higher version than 5.4.0,6.1.0,7.0.0,and avoid the version [5.2.0,5.4.0],[6.0.0,6.1.0],7.0.0; Upgrade f5 big-ip_access_policy_manager to a higher version than 11.6.5,12.1.5,13.1.3,14.1.2,15.0.1,and avoid the version [11.6.0,11.6.5],[12.1.0,12.1.5],[13.1.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.0.1]; Upgrade f5 big-ip_advanced_firewall_manager to a higher version than 11.6.5,12.1.5,13.1.3,14.1.2,15.0.1,and avoid the version [11.6.0,11.6.5],[12.1.0,12.1.5],[13.1.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.0.1]; Upgrade f5 big-ip_analytics to a higher version than 11.6.5,12.1.5,13.1.3,14.1.2,15.0.1,and avoid the version [11.6.0,11.6.5],[12.1.0,12.1.5],[13.1.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.0.1]; Upgrade f5 big-ip_application_acceleration_manager to a higher version than 11.6.5,12.1.5,13.1.3,14.1.2,15.0.1,and avoid the version [11.6.0,11.6.5],[12.1.0,12.1.5],[13.1.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.0.1]; Upgrade f5 big-ip_application_security_manager to a higher version than 11.6.5,12.1.5,13.1.3,14.1.2,15.0.1,and avoid the version [11.6.0,11.6.5],[12.1.0,12.1.5],[13.1.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.0.1]; Upgrade f5 big-ip_domain_name_system to a higher version than 11.6.5,12.1.5,13.1.3,14.1.2,15.0.1,and avoid the version [11.6.0,11.6.5],[12.1.0,12.1.5],[13.1.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.0.1]; Upgrade f5 big-ip_edge_gateway to a higher version than 11.6.5,12.1.5,13.1.3,14.1.2,15.0.1,and avoid the version [11.6.0,11.6.5],[12.1.0,12.1.5],[13.1.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.0.1]; Upgrade f5 big-ip_fraud_protection_service to a higher version than 11.6.5,12.1.5,13.1.3,14.1.2,15.0.1,and avoid the version [11.6.0,11.6.5],[12.1.0,12.1.5],[13.1.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.0.1]; Upgrade f5 big-ip_global_traffic_manager to a higher version than 11.6.5,12.1.5,13.1.3,14.1.2,15.0.1,and avoid the version [11.6.0,11.6.5],[12.1.0,12.1.5],[13.1.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.0.1]; Upgrade f5 big-ip_link_controller to a higher version than 11.6.5,12.1.5,13.1.3,14.1.2,15.0.1,and avoid the version [11.6.0,11.6.5],[12.1.0,12.1.5],[13.1.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.0.1]; Upgrade f5 big-ip_local_traffic_manager to a higher version than 11.6.5,12.1.5,13.1.3,14.1.2,15.0.1,and avoid the version [11.6.0,11.6.5],[12.1.0,12.1.5],[13.1.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.0.1]; Upgrade f5 big-ip_policy_enforcement_manager to a higher version than 11.6.5,12.1.5,13.1.3,14.1.2,15.0.1,and avoid the version [11.6.0,11.6.5],[12.1.0,12.1.5],[13.1.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.0.1]; Upgrade f5 big-ip_webaccelerator to a higher version than 11.6.5,12.1.5,13.1.3,14.1.2,15.0.1,and avoid the version [11.6.0,11.6.5],[12.1.0,12.1.5],[13.1.0,13.1.3],[14.0.0,14.1.2],[15.0.0,15.0.1]; Upgrade f5 enterprise_manager to a higher version than 3.1.1,and avoid the version 3.1.1; Upgrade f5 iworkflow to a higher version than 2.3.0,and avoid the version 2.3.0; Upgrade f5 traffix_signaling_delivery_controller to a higher version than 5.1.0,and avoid the version [5.0.0,5.1.0]