Wind River Support Network

HomeDefectsLIN7-8903

Fixed

LIN7-8903 : Security Advisory - tcpdump - CVE-2017-12900

Created: Sep 14, 2017 Updated: Sep 8, 2018

Resolved Date: Oct 13, 2017

Found In Version: 7.0.0.26

Fix Version: 7.0.0.27

Severity: Standard

Applicable for: Wind River Linux 7

Component/s: Userspace

Description

Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().

https://nvd.nist.gov/vuln/detail/CVE-2017-12900

Other Downloads

Wind River Linux 7.0.0.27
Wind River Linux 7.0.0.28
Wind River Linux 7.0.0.29
Wind River Linux 7.0.0.30
Wind River Linux 7.0.0.31

CVEs

CVE-2017-12900