Security update for tcpdump SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:0505-1 Final 1 1 2022-02-18T09:58:09Z current 2022-02-18T09:58:09Z 2022-02-18T09:58:09Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for tcpdump This update for tcpdump fixes the following issues: - CVE-2018-16301: Fixed segfault when handling large files (bsc#1195825). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2022-505,Image SLES12-SP4-Azure-BYOS-2022-505,Image SLES12-SP4-SAP-Azure-BYOS-2022-505,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2022-505,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2022-505,Image SLES12-SP4-SAP-EC2-HVM-2022-505,Image SLES12-SP5-Azure-BYOS-2022-505,Image SLES12-SP5-Azure-Basic-On-Demand-2022-505,Image SLES12-SP5-Azure-HPC-BYOS-2022-505,Image SLES12-SP5-Azure-HPC-On-Demand-2022-505,Image SLES12-SP5-Azure-SAP-BYOS-2022-505,Image SLES12-SP5-Azure-SAP-On-Demand-2022-505,Image SLES12-SP5-Azure-Standard-On-Demand-2022-505,Image SLES12-SP5-EC2-BYOS-2022-505,Image SLES12-SP5-EC2-ECS-On-Demand-2022-505,Image SLES12-SP5-EC2-On-Demand-2022-505,Image SLES12-SP5-EC2-SAP-BYOS-2022-505,Image SLES12-SP5-EC2-SAP-On-Demand-2022-505,Image SLES12-SP5-GCE-BYOS-2022-505,Image SLES12-SP5-GCE-On-Demand-2022-505,Image SLES12-SP5-GCE-SAP-BYOS-2022-505,Image SLES12-SP5-GCE-SAP-On-Demand-2022-505,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2022-505,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2022-505,SUSE-2022-505,SUSE-OpenStack-Cloud-8-2022-505,SUSE-OpenStack-Cloud-9-2022-505,SUSE-OpenStack-Cloud-Crowbar-8-2022-505,SUSE-OpenStack-Cloud-Crowbar-9-2022-505,SUSE-SLE-SAP-12-SP3-2022-505,SUSE-SLE-SAP-12-SP4-2022-505,SUSE-SLE-SERVER-12-SP2-BCL-2022-505,SUSE-SLE-SERVER-12-SP3-2022-505,SUSE-SLE-SERVER-12-SP3-BCL-2022-505,SUSE-SLE-SERVER-12-SP4-LTSS-2022-505,SUSE-SLE-SERVER-12-SP5-2022-505 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20220505-1/ Link for SUSE-SU-2022:0505-1 https://lists.suse.com/pipermail/sle-security-updates/2022-February/010269.html E-Mail link for SUSE-SU-2022:0505-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1195825 SUSE Bug 1195825 https://www.suse.com/security/cve/CVE-2018-16301/ SUSE CVE CVE-2018-16301 page HPE Helion OpenStack 8 Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 tcpdump-4.9.2-14.20.1 tcpdump-4.9.2-14.20.1 as a component of HPE Helion OpenStack 8 tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP4-Azure-BYOS tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP4-SAP-EC2-HVM tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-Azure-BYOS tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-EC2-BYOS tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-EC2-On-Demand tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-GCE-BYOS tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-GCE-On-Demand tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production tcpdump-4.9.2-14.20.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production tcpdump-4.9.2-14.20.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL tcpdump-4.9.2-14.20.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL tcpdump-4.9.2-14.20.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS tcpdump-4.9.2-14.20.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tcpdump-4.9.2-14.20.1 as a component of SUSE Linux Enterprise Server 12 SP5 tcpdump-4.9.2-14.20.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 tcpdump-4.9.2-14.20.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 tcpdump-4.9.2-14.20.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 tcpdump-4.9.2-14.20.1 as a component of SUSE OpenStack Cloud 8 tcpdump-4.9.2-14.20.1 as a component of SUSE OpenStack Cloud 9 tcpdump-4.9.2-14.20.1 as a component of SUSE OpenStack Cloud Crowbar 8 tcpdump-4.9.2-14.20.1 as a component of SUSE OpenStack Cloud Crowbar 9 The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump. CVE-2018-16301 HPE Helion OpenStack 8:tcpdump-4.9.2-14.20.1 Image SLES12-SP4-Azure-BYOS:tcpdump-4.9.2-14.20.1 Image SLES12-SP4-SAP-Azure-BYOS:tcpdump-4.9.2-14.20.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:tcpdump-4.9.2-14.20.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:tcpdump-4.9.2-14.20.1 Image SLES12-SP4-SAP-EC2-HVM:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-Azure-BYOS:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-Azure-Basic-On-Demand:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-Azure-HPC-BYOS:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-Azure-HPC-On-Demand:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-Azure-SAP-BYOS:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-Azure-SAP-On-Demand:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-Azure-Standard-On-Demand:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-EC2-BYOS:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-EC2-ECS-On-Demand:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-EC2-On-Demand:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-EC2-SAP-BYOS:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-EC2-SAP-On-Demand:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-GCE-BYOS:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-GCE-On-Demand:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-GCE-SAP-BYOS:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-GCE-SAP-On-Demand:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:tcpdump-4.9.2-14.20.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:tcpdump-4.9.2-14.20.1 SUSE Linux Enterprise Server 12 SP2-BCL:tcpdump-4.9.2-14.20.1 SUSE Linux Enterprise Server 12 SP3-BCL:tcpdump-4.9.2-14.20.1 SUSE Linux Enterprise Server 12 SP3-LTSS:tcpdump-4.9.2-14.20.1 SUSE Linux Enterprise Server 12 SP4-LTSS:tcpdump-4.9.2-14.20.1 SUSE Linux Enterprise Server 12 SP5:tcpdump-4.9.2-14.20.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.20.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:tcpdump-4.9.2-14.20.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:tcpdump-4.9.2-14.20.1 SUSE OpenStack Cloud 8:tcpdump-4.9.2-14.20.1 SUSE OpenStack Cloud 9:tcpdump-4.9.2-14.20.1 SUSE OpenStack Cloud Crowbar 8:tcpdump-4.9.2-14.20.1 SUSE OpenStack Cloud Crowbar 9:tcpdump-4.9.2-14.20.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220505-1/ https://www.suse.com/security/cve/CVE-2018-16301.html CVE-2018-16301 https://bugzilla.suse.com/1153098 SUSE Bug 1153098 https://bugzilla.suse.com/1153332 SUSE Bug 1153332 https://bugzilla.suse.com/1195825 SUSE Bug 1195825