# ELSA-2020-4760: tcpdump security update

ELSA-2020-4760, released November 10, 2020, fixes 24 CVEs in tcpdump (version 14:4.9.3-1.el8). None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/elsa-2020-4760
- Platform: Linux
- Released: Nov 10, 2020
- Priority: High (Closes CVE-2018-16229, high severity)
- CVEs: 24, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://linux.oracle.com/errata/ELSA-2020-4760.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [tcpdump](https://patchblox.com/security/data/product/linux/tcpdump.md) | ol 8 | 14:4.9.3-1.el8 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2018-16227](https://patchblox.com/security/data/cve/CVE-2018-16227.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0682 |  |
| [CVE-2018-16229](https://patchblox.com/security/data/cve/CVE-2018-16229.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0682 |  |
| [CVE-2018-14469](https://patchblox.com/security/data/cve/CVE-2018-14469.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0534 |  |
| [CVE-2018-14880](https://patchblox.com/security/data/cve/CVE-2018-14880.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0514 |  |
| [CVE-2019-15166](https://patchblox.com/security/data/cve/CVE-2019-15166.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0499 |  |
| [CVE-2018-14881](https://patchblox.com/security/data/cve/CVE-2018-14881.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0476 |  |
| [CVE-2018-14463](https://patchblox.com/security/data/cve/CVE-2018-14463.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0472 |  |
| [CVE-2018-14879](https://patchblox.com/security/data/cve/CVE-2018-14879.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.0 | 0.0467 |  |
| [CVE-2018-16451](https://patchblox.com/security/data/cve/CVE-2018-16451.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0413 |  |
| [CVE-2018-16300](https://patchblox.com/security/data/cve/CVE-2018-16300.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0412 |  |
| [CVE-2018-16452](https://patchblox.com/security/data/cve/CVE-2018-16452.md) | High | tcpdump: The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion. | 7.5 | 0.0412 |  |
| [CVE-2018-14465](https://patchblox.com/security/data/cve/CVE-2018-14465.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0407 |  |
| [CVE-2018-10103](https://patchblox.com/security/data/cve/CVE-2018-10103.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 9.8 | 0.0407 |  |
| [CVE-2018-14461](https://patchblox.com/security/data/cve/CVE-2018-14461.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0399 |  |
| [CVE-2018-14462](https://patchblox.com/security/data/cve/CVE-2018-14462.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0399 |  |
| [CVE-2018-14464](https://patchblox.com/security/data/cve/CVE-2018-14464.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0399 |  |
| [CVE-2018-14466](https://patchblox.com/security/data/cve/CVE-2018-14466.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0399 |  |
| [CVE-2018-14467](https://patchblox.com/security/data/cve/CVE-2018-14467.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0399 |  |
| [CVE-2018-14468](https://patchblox.com/security/data/cve/CVE-2018-14468.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0399 |  |
| [CVE-2018-14470](https://patchblox.com/security/data/cve/CVE-2018-14470.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0399 |  |
| [CVE-2018-14882](https://patchblox.com/security/data/cve/CVE-2018-14882.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0389 |  |
| [CVE-2018-16230](https://patchblox.com/security/data/cve/CVE-2018-16230.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0389 |  |
| [CVE-2018-10105](https://patchblox.com/security/data/cve/CVE-2018-10105.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 9.8 | 0.0386 |  |
| [CVE-2018-16228](https://patchblox.com/security/data/cve/CVE-2018-16228.md) | High | tcpdump: The tcpdump packages contain the tcpdump utility for monitoring network traffic | 7.5 | 0.0374 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo