CVE-2017-5203
The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2017-01-28
- Last modified
- 2024-08-05
- Weaknesses
- CWE-119
Affected products
- Debian Linux (Debian)
- Enterprise Linux Desktop (Redhat)
- Enterprise Linux Server (Redhat)
- Enterprise Linux Server Aus (Redhat)
- Enterprise Linux Server Eus (Redhat)
- Enterprise Linux Server Tus (Redhat)
- Enterprise Linux Workstation (Redhat)
- Tcpdump (Tcpdump)
References
- http://www.debian.org/security/2017/dsa-3775
- http://www.securityfocus.com/bid/95852
- http://www.securitytracker.com/id/1037755
- https://access.redhat.com/errata/RHSA-2017:1871
- https://security.gentoo.org/glsa/201702-30
- https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html
