CVE-2019-15166

Published: 30 September 2019

lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.

Priority

CVSS 3 base score: 7.5

Package	Release	Status
tcpdump Launchpad, Ubuntu, Debian	bionic	Released (4.9.3-0ubuntu0.18.04.1)
	disco	Ignored (reached end-of-life)
	eoan	Not vulnerable (4.9.3-2)
	precise	Released (4.9.3-0ubuntu0.12.04.1)
	trusty	Released (4.9.3-0ubuntu0.14.04.1+esm1)
	upstream	Released (4.9.3)
	xenial	Released (4.9.3-0ubuntu0.16.04.1)

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.