Go
Register
|
Log in
Subscribe
tcpdump
command-line network traffic analyzer
×
Choose email to subscribe with
general
source:
tcpdump
(
main
)
version:
4.9.3-2
maintainer:
Romain Francoise
(
DMD
)
arch:
any
std-ver:
4.4.1
VCS:
Git
(
Browse
,
QA
)
versions
[more versions can be listed by madison]
[old versions available from snapshot.debian.org]
[pool directory]
o-o-stable:
4.
9.
2-
1~
deb8u1
o-o-sec:
4.
9.
3-
1~
deb8u1
oldstable:
4.
9.
2-
1~
deb9u1
old-sec:
4.
9.
2-
1~
deb9u1
stable:
4.9.2-3
testing:
4.
9.
3~
git20190901-
2
unstable:
4.9.3-2
versioned links
4.
9.
2-
1~
deb8u1:
[.dsc, use dget on this link to retrieve source package]
[changelog]
[copyright]
[rules]
[control]
4.
9.
2-
1~
deb9u1:
[.dsc, use dget on this link to retrieve source package]
[changelog]
[copyright]
[rules]
[control]
4.9.2-3:
[.dsc, use dget on this link to retrieve source package]
[changelog]
[copyright]
[rules]
[control]
4.
9.
3~
git20190901-
2:
[.dsc, use dget on this link to retrieve source package]
[changelog]
[copyright]
[rules]
[control]
4.
9.
3-
1~
deb8u1:
[.dsc, use dget on this link to retrieve source package]
[changelog]
[copyright]
[rules]
[control]
4.9.3-2:
[.dsc, use dget on this link to retrieve source package]
[changelog]
[copyright]
[rules]
[control]
binaries
tcpdump
(
13 bugs
:
1
,
4
,
8
,
0
)
action needed
24 security issues
in buster
high
There are
24 open security issues
in buster.
24 important issues:
CVE-2018-16300
: The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion.
CVE-2018-16227
: The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.
CVE-2018-16228
: The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().
CVE-2018-16229
: The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().
CVE-2018-16452
: The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.
CVE-2018-16230
: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).
CVE-2018-14880
: The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
CVE-2018-14881
: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).
CVE-2018-14882
: The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.
CVE-2018-14463
: The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print().
CVE-2019-15166
: lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
CVE-2018-14470
: The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().
CVE-2018-16451
: The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.
CVE-2018-14467
: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).
CVE-2018-10105
: tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2).
CVE-2018-10103
: tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).
CVE-2018-14879
: The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
CVE-2018-14469
: The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
CVE-2018-14466
: The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().
CVE-2018-14464
: The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().
CVE-2018-14465
: The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
CVE-2018-14462
: The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
CVE-2018-14468
: The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
CVE-2018-14461
: The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().
Please fix them.
24 security issues
in bullseye
high
There are
24 open security issues
in bullseye.
24 important issues:
CVE-2018-16300
: The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion.
CVE-2018-16227
: The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.
CVE-2018-16228
: The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().
CVE-2018-16229
: The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().
CVE-2018-16452
: The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.
CVE-2018-16230
: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).
CVE-2018-14880
: The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
CVE-2018-14881
: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).
CVE-2018-14882
: The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.
CVE-2018-14463
: The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print().
CVE-2019-15166
: lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
CVE-2018-14470
: The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().
CVE-2018-16451
: The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.
CVE-2018-14467
: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).
CVE-2018-10105
: tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2).
CVE-2018-10103
: tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).
CVE-2018-14879
: The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
CVE-2018-14469
: The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
CVE-2018-14466
: The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().
CVE-2018-14464
: The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().
CVE-2018-14465
: The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
CVE-2018-14462
: The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
CVE-2018-14468
: The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
CVE-2018-14461
: The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().
Please fix them.
24 security issues
in stretch
high
There are
24 open security issues
in stretch.
24 important issues:
CVE-2018-16300
: The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion.
CVE-2018-16227
: The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.
CVE-2018-16228
: The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().
CVE-2018-16229
: The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().
CVE-2018-16452
: The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.
CVE-2018-16230
: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).
CVE-2018-14880
: The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
CVE-2018-14881
: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).
CVE-2018-14882
: The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.
CVE-2018-14463
: The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print().
CVE-2019-15166
: lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
CVE-2018-14470
: The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().
CVE-2018-16451
: The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.
CVE-2018-14467
: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).
CVE-2018-10105
: tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2).
CVE-2018-10103
: tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).
CVE-2018-14879
: The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
CVE-2018-14469
: The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
CVE-2018-14466
: The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().
CVE-2018-14464
: The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().
CVE-2018-14465
: The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
CVE-2018-14462
: The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
CVE-2018-14468
: The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
CVE-2018-14461
: The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().
Please fix them.
Does not build reproducibly
during testing
normal
A package
building reproducibly
enables third parties to verify that the source matches the distributed binaries. It has been
identified
that this source package produced different results, failed to build or had other issues in a
test environment
. Please read about
how to improve the situation
!
testing migrations
excuses
:
Migration status for tcpdump (4.9.3~git20190901-2 to 4.9.3-2): Will attempt migration (Any information below is purely informational)
Additional info:
Piuparts tested OK -
https://piuparts.debian.org/sid/source/t/tcpdump.html
5 days old (needed 5 days)
news
[rss feed]
[
2019-10-11
]
Accepted tcpdump 4.9.3-1~deb8u1 (source amd64) into oldoldstable
(
Markus Koschany
)
[
2019-10-11
]
Accepted tcpdump 4.9.3-2 (source) into unstable
(
Romain Francoise
)
[
2019-10-10
]
Accepted tcpdump 4.9.3-1 (source) into unstable
(
Romain Francoise
)
[
2019-09-12
]
tcpdump 4.9.3~git20190901-2 MIGRATED to testing
(
Debian testing watch
)
[
2019-09-07
]
Accepted tcpdump 4.9.3~git20190901-2 (source) into unstable
(
Romain Francoise
)
[
2019-09-01
]
Accepted tcpdump 4.9.3~git20190901-1 (source) into unstable
(
Romain Francoise
)
[
2018-04-06
]
tcpdump 4.9.2-3 MIGRATED to testing
(
Debian testing watch
)
[
2018-03-31
]
Accepted tcpdump 4.9.2-3 (source) into unstable
(
Romain Francoise
)
[
2018-01-06
]
tcpdump 4.9.2-2 MIGRATED to testing
(
Debian testing watch
)
[
2017-12-31
]
Accepted tcpdump 4.9.2-2 (source) into unstable
(
Romain Francoise
)
[
2017-09-23
]
Accepted tcpdump 4.9.2-1~deb8u1 (amd64 source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
(
Romain Francoise
)
[
2017-09-23
]
Accepted tcpdump 4.9.2-1~deb9u1 (amd64 source) into proposed-updates->stable-new, proposed-updates
(
Romain Francoise
)
[
2017-09-15
]
Accepted tcpdump 4.9.2-1~deb7u1 (source amd64) into oldoldstable
(
Romain Francoise
)
(signed by:
Guido Günther
)
[
2017-09-11
]
tcpdump 4.9.2-1 MIGRATED to testing
(
Debian testing watch
)
[
2017-09-08
]
Accepted tcpdump 4.9.2-1 (source) into unstable
(
Romain Francoise
)
[
2017-09-07
]
tcpdump 4.9.1-3 MIGRATED to testing
(
Debian testing watch
)
[
2017-09-06
]
Accepted tcpdump 4.9.0-1~deb7u2 (source amd64) into oldoldstable
(
Guido Günther
)
[
2017-09-04
]
Accepted tcpdump 4.9.1-3 (source) into unstable
(
Romain Francoise
)
[
2017-09-02
]
Accepted tcpdump 4.9.1-2 (source) into unstable
(
Romain Francoise
)
[
2017-08-26
]
Accepted tcpdump 4.9.1-1 (source) into unstable
(
Romain Francoise
)
[
2017-07-07
]
tcpdump 4.9.0-3 MIGRATED to testing
(
Debian testing watch
)
[
2017-07-02
]
Accepted tcpdump 4.9.0-3 (source) into unstable
(
Romain Francoise
)
[
2017-02-23
]
tcpdump 4.9.0-2 MIGRATED to testing
(
Debian testing watch
)
[
2017-02-12
]
Accepted tcpdump 4.9.0-1~deb8u1 (amd64 source) into proposed-updates->stable-new, proposed-updates
(
Romain Francoise
)
[
2017-02-11
]
Accepted tcpdump 4.9.0-2 (source) into unstable
(
Romain Francoise
)
[
2017-01-30
]
Accepted tcpdump 4.9.0-1~deb7u1 (amd64 source) into oldstable
(
Romain Francoise
)
[
2017-01-29
]
tcpdump 4.9.0-1 MIGRATED to testing
(
Debian testing watch
)
[
2017-01-26
]
Accepted tcpdump 4.9.0-1 (source) into unstable
(
Romain Francoise
)
[
2016-12-01
]
tcpdump 4.8.1-2 MIGRATED to testing
(
Debian testing watch
)
[
2016-10-29
]
Accepted tcpdump 4.8.1-2 (source) into unstable
(
Romain Francoise
)
1
2
bugs
[bug history graph]
all:
13
RC:
1
I&N:
4
M&W:
8
F&P:
0
patch:
0
links
homepage
lintian
buildd:
logs
,
clang
,
reproducibility
,
cross
popcon
browse source code
edit tags
security tracker
screenshots
ubuntu
[Information about Ubuntu for Debian Developers]
version:
4.9.3-2
9 bugs
![[bug history graph]](https://qa.debian.org/data/bts/graphs/t/tcpdump.png){kind=link}