[ GLSA 201709-23 ] Tcpdump

[GLSA]

Gentoo Linux Security Advisory

Title: Tcpdump: Multiple vulnerabilities (GLSA 201709-23)
Severity: normal
Exploitable: remote
Date: 2017-09-25
Bug(s): #624652, #626462, #630110
ID: 201709-23

Synopsis

Multiple vulnerabilities have been found in Tcpdump, the worst of
which may allow execution of arbitrary code.


Background

Tcpdump is a tool for network monitoring and data acquisition.

Affected Packages

Package: net-analyzer/tcpdump
Vulnerable: < 4.9.2
Unaffected: >= 4.9.2
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Tcpdump. Please review
the referenced CVE identifiers for details.


Impact

A remote attacker could possibly execute arbitrary code with the
privileges of the process or cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Tcpdump users should upgrade to the latest version: