Summary
This update for tcpdump provides the following fix:
- The original fix for CVE-2016-7975 was using a variable before declaring it. Fix this
by moving the declaration before any usage. (bsc#1094241, CVE-2016-7975)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLES 11 SP4 Linux Enterprise Server 11 SP4 | tcpdump | 3.9.8-1.30.8.1 |
| SUSE · SLES for SAP 11 SP4 Linux Enterprise Server for SAP Applications 11 SP4 | tcpdump | 3.9.8-1.30.8.1 |
Vulnerabilities 1
-
Unscored —
The TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-tcp.c:tcp_print().