lmp_print_data_link_subobjs() in print-lmp.c in tcpdump... · CVE-2019-15166 · GitHub Advisory Database · GitHub

lmp_print_data_link_subobjs() in print-lmp.c in tcpdump...

Moderate severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Jan 28, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.

References

Published by the National Vulnerability Database

Oct 3, 2019

Published to the GitHub Advisory Database May 24, 2022

Last updated Jan 28, 2023

Weaknesses

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Learn more on MITRE.

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. Learn more on MITRE.