CVE-2019-15166

lmp_print in tcpdump lacks certain boundary checks

Low · published October 3, 2019

CVSS v3.1
1.6
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.

The record
Technical detail
CVSS v3.1
1.6 · LOW
Vector
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.04986 · 92.2th percentile
Published
2019-10-03T16:01Z
EPSS history
Timeline
  • 03 OCT 16:01Z
    lmp_print in tcpdump lacks certain boundary checks
    cvelistv5