Register | Log in

tcpdump

command-line network traffic analyzer

Choose email to subscribe with

general

source: tcpdump (source, net)
version: 4.9.0-3
maintainer: Romain Francoise [DMD]
arch: any
std-ver: 4.0.0
VCS: Git (Browse)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 4.3.0-1+deb7u2
o-o-sec: 4.9.0-1~deb7u1
o-o-bpo-sl: 4.7.4-1~bpo70+1
oldstable: 4.9.0-1~deb8u1
old-sec: 4.9.0-1~deb8u1
old-bpo: 4.7.4-1~bpo8+1
stable: 4.9.0-2
testing: 4.9.0-3
unstable: 4.9.0-3

versioned links

4.3.0-1+deb7u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.7.4-1~bpo8+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.7.4-1~bpo70+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.0-1~deb7u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.0-1~deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.9.0-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

tcpdump

action needed

A new upstream version is available: 4.9.1

high

A new upstream version 4.9.1 is available, you should consider packaging it.

Created: 2017-08-12 Last update: 2017-08-22 19:22

4 security issues in sid

high

There are 4 open security issues in sid.

4 important issues:

CVE-2017-11541: tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
CVE-2017-11108: tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.
CVE-2017-11543: tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.
CVE-2017-11542: tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.

Please fix them.

Created: 2017-07-09 Last update: 2017-08-22 07:26

4 security issues in wheezy

high

There are 4 open security issues in wheezy.

4 important issues:

CVE-2017-11541: tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
CVE-2017-11108: tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.
CVE-2017-11543: tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.
CVE-2017-11542: tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.

Please fix them.

Created: 2017-07-09 Last update: 2017-08-22 07:26

4 security issues in buster

high

There are 4 open security issues in buster.

4 important issues:

CVE-2017-11541: tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
CVE-2017-11108: tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.
CVE-2017-11543: tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.
CVE-2017-11542: tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.

Please fix them.

Created: 2017-07-09 Last update: 2017-08-22 07:26

4 security issues in jessie

high

There are 4 open security issues in jessie.

3 important issues:

CVE-2017-11541: tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
CVE-2017-11543: tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.
CVE-2017-11542: tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.

1 issue skipped by the security teams:

CVE-2017-11108: tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.

Please fix them.

Created: 2017-07-09 Last update: 2017-08-22 07:26

4 security issues in stretch

high

There are 4 open security issues in stretch.

3 important issues:

CVE-2017-11541: tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
CVE-2017-11543: tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.
CVE-2017-11542: tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.

1 issue skipped by the security teams:

CVE-2017-11108: tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.

Please fix them.

Created: 2017-07-09 Last update: 2017-08-22 07:26

1 bug tagged patch in the BTS

normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2017-08-12 Last update: 2017-08-22 19:08

news

[2017-07-07] tcpdump 4.9.0-3 MIGRATED to testing (Debian testing watch)
[2017-07-02] Accepted tcpdump 4.9.0-3 (source) into unstable (Romain Francoise)
[2017-02-23] tcpdump 4.9.0-2 MIGRATED to testing (Debian testing watch)
[2017-02-12] Accepted tcpdump 4.9.0-1~deb8u1 (amd64 source) into proposed-updates->stable-new, proposed-updates (Romain Francoise)
[2017-02-11] Accepted tcpdump 4.9.0-2 (source) into unstable (Romain Francoise)
[2017-01-30] Accepted tcpdump 4.9.0-1~deb7u1 (amd64 source) into oldstable (Romain Francoise)
[2017-01-29] tcpdump 4.9.0-1 MIGRATED to testing (Debian testing watch)
[2017-01-26] Accepted tcpdump 4.9.0-1 (source) into unstable (Romain Francoise)
[2016-12-01] tcpdump 4.8.1-2 MIGRATED to testing (Debian testing watch)
[2016-10-29] Accepted tcpdump 4.8.1-2 (source) into unstable (Romain Francoise)
[2016-10-29] Accepted tcpdump 4.8.1-1 (source) into unstable (Romain Francoise)
[2016-09-23] tcpdump 4.7.4-3 MIGRATED to testing (Debian testing watch)
[2016-09-17] Accepted tcpdump 4.7.4-3 (source) into unstable (Romain Francoise)
[2016-09-03] tcpdump 4.7.4-2 MIGRATED to testing (Debian testing watch)
[2016-08-28] Accepted tcpdump 4.7.4-2 (source) into unstable (Romain Francoise)
[2015-08-04] Accepted tcpdump 4.6.2-5+deb8u1 (amd64 source) into proposed-updates->stable-new, proposed-updates (Romain Francoise)
[2015-05-29] tcpdump 4.7.4-1 MIGRATED to testing (Britney)
[2015-05-23] Accepted tcpdump 4.7.4-1 (source) into unstable (Romain Francoise)
[2015-04-07] tcpdump 4.6.2-5 MIGRATED to testing (Britney)
[2015-04-04] Accepted tcpdump 4.6.2-5 (amd64 source) into unstable (Romain Francoise)
[2015-03-17] Accepted tcpdump 4.3.0-1+deb7u2 (amd64 source) into proposed-updates->stable-new, proposed-updates (Romain Francoise)
[2015-03-17] tcpdump 4.6.2-4 MIGRATED to testing (Britney)
[2015-03-17] Accepted tcpdump 4.1.1-1+deb6u2 (source amd64) into squeeze-lts (Romain Francoise) (signed by: Raphaël Hertzog)
[2015-03-14] Accepted tcpdump 4.6.2-4 (source) into unstable (Romain Francoise)
[2014-12-08] Accepted tcpdump 4.1.1-1+deb6u1 (source i386) into squeeze-lts (Thorsten Alteholz)
[2014-12-08] Accepted tcpdump 4.3.0-1+deb7u1 (amd64 source) into proposed-updates->stable-new, proposed-updates (Romain Francoise)
[2014-12-02] tcpdump 4.6.2-3 MIGRATED to testing (Britney)
[2014-11-29] Accepted tcpdump 4.6.2-3 (source) into unstable (Romain Francoise)
[2014-11-25] tcpdump 4.6.2-2 MIGRATED to testing (Britney)
[2014-11-22] Accepted tcpdump 4.6.2-2 (amd64 source) into unstable (Romain Francoise)

1
2

bugs [bug history graph]

all: 14
RC: 0
I&N: 6
M&W: 8
F&P: 0

links

homepage
lintian
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 4.9.0-3
6 bugs

Debian Package Tracker — Copyright 2013-2016 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Git Repository — How to contribute