Linux · Ubuntu · Package update · September 29, 2019

tcpdump 4.9.3-0ubuntu0.18.04.1: tcpdump 4.9.3-0ubuntu0.18.04.1 for Ubuntu 18.04.6 LTS (bionic)

tcpdump 4.9.3-0ubuntu0.18.04.1, released September 29, 2019, fixes 28 CVEs in tcpdump. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
28
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0682
94th percentile

Priority of the 28 CVEs

Patch now 0 Urgent 1 High 24 Routine 3

Fixed package versions

ProductReleaseFixed in
tcpdumpUbuntu 18.04.6 LTS (bionic)4.9.3-0ubuntu0.18.04.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2019-15167 tcpdump: The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a dif...9.1 0.0105 None reported
High CVE-2018-16227 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0682 None reported
High CVE-2018-16229 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0655 None reported
High CVE-2018-14469 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0534 None reported
High CVE-2018-14880 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0480 None reported
High CVE-2019-15166 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0479 None reported
High CVE-2018-14881 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0476 None reported
High CVE-2018-14879 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.0 0.0465 None reported
High CVE-2018-14463 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0454 None reported
High CVE-2018-14468 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0399 None reported
High CVE-2018-16451 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0397 None reported
High CVE-2018-16300 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0396 None reported
High CVE-2018-16452 tcpdump: The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.7.5 0.0396 None reported
High CVE-2018-10103 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)9.8 0.0396 None reported
High CVE-2018-14461 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0383 None reported
High CVE-2018-14462 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0383 None reported
High CVE-2018-14464 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0383 None reported
High CVE-2018-14466 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0383 None reported
High CVE-2018-14467 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0383 None reported
High CVE-2018-14470 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0383 None reported
High CVE-2018-14465 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0381 None reported
High CVE-2018-10105 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)9.8 0.0375 None reported
High CVE-2018-14882 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0374 None reported
High CVE-2018-16230 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0374 None reported
High CVE-2018-16228 tcpdump: ELSA-2020-4760: tcpdump security, bug fix, and enhancement update (MODERATE)7.5 0.0350 None reported
Showing 1 to 25 of 28 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.