Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 146377 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.883136
Kategorie:CentOS Local Security Checks
Titel:CentOS Update for tcpdump CESA-2019:3976 centos7
Zusammenfassung:The remote host is missing an update for the 'tcpdump'; package(s) announced via the CESA-2019:3976 advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'tcpdump'
package(s) announced via the CESA-2019:3976 advisory.

Vulnerability Insight:
The tcpdump packages contain the tcpdump utility for monitoring network
traffic. The tcpdump utility can capture and display the packet headers on
a particular network interface or on all interfaces.

Security Fix(es):

* tcpdump: Stack-based buffer over-read in print-hncp.c:print_prefix() via
crafted pcap (CVE-2018-19519)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Affected Software/OS:
'tcpdump' package(s) on CentOS 7.

Solution:
Please install the updated package(s).

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:N/A:N

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2018-19519
BugTraq ID: 106098
http://www.securityfocus.com/bid/106098
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/
https://github.com/zyingp/temp/blob/master/tcpdump.md
RedHat Security Advisories: RHSA-2019:3976
https://access.redhat.com/errata/RHSA-2019:3976
https://usn.ubuntu.com/4252-1/
https://usn.ubuntu.com/4252-2/
CopyrightCopyright (C) 2019 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.