Issued:: 2019-11-26
Updated:: 2019-11-26

RHSA-2019:3976 - Security Advisory

Overview
Updated Packages

Synopsis

Low: tcpdump security update

Type/Severity

Security Advisory: Low

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for tcpdump is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces.

Security Fix(es):

tcpdump: Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap (CVE-2018-19519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

Red Hat Enterprise Linux Server 7 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
Red Hat Enterprise Linux Server - AUS 7.7 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
Red Hat Enterprise Linux Workstation 7 x86_64
Red Hat Enterprise Linux Desktop 7 x86_64
Red Hat Enterprise Linux for IBM z Systems 7 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
Red Hat Enterprise Linux for Power, big endian 7 ppc64
Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
Red Hat Enterprise Linux for Scientific Computing 7 x86_64
Red Hat Enterprise Linux for Power, little endian 7 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7 ppc64le
Red Hat Enterprise Linux Server - TUS 7.7 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.7 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

BZ - 1655374 - CVE-2018-19519 tcpdump: Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap

CVEs

CVE-2018-19519

References

https://access.redhat.com/security/updates/classification/#low

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux Server 7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
x86_64
tcpdump-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 09728df5b04e03f212a1a8be620b5ea3c97515c50e73cb079ec936ee174ba61d
tcpdump-debuginfo-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 9c060696c950425af99ecc273d73fc33566c9ab2bad65c5d4c09fd67717e9eca

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
x86_64
tcpdump-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 09728df5b04e03f212a1a8be620b5ea3c97515c50e73cb079ec936ee174ba61d
tcpdump-debuginfo-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 9c060696c950425af99ecc273d73fc33566c9ab2bad65c5d4c09fd67717e9eca

Red Hat Enterprise Linux Server - AUS 7.7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
x86_64
tcpdump-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 09728df5b04e03f212a1a8be620b5ea3c97515c50e73cb079ec936ee174ba61d
tcpdump-debuginfo-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 9c060696c950425af99ecc273d73fc33566c9ab2bad65c5d4c09fd67717e9eca

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
x86_64
tcpdump-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 09728df5b04e03f212a1a8be620b5ea3c97515c50e73cb079ec936ee174ba61d
tcpdump-debuginfo-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 9c060696c950425af99ecc273d73fc33566c9ab2bad65c5d4c09fd67717e9eca

Red Hat Enterprise Linux Workstation 7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
x86_64
tcpdump-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 09728df5b04e03f212a1a8be620b5ea3c97515c50e73cb079ec936ee174ba61d
tcpdump-debuginfo-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 9c060696c950425af99ecc273d73fc33566c9ab2bad65c5d4c09fd67717e9eca

Red Hat Enterprise Linux Desktop 7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
x86_64
tcpdump-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 09728df5b04e03f212a1a8be620b5ea3c97515c50e73cb079ec936ee174ba61d
tcpdump-debuginfo-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 9c060696c950425af99ecc273d73fc33566c9ab2bad65c5d4c09fd67717e9eca

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
s390x
tcpdump-4.9.2-4.el7_7.1.s390x.rpm	SHA-256: 3ebed20abd9a38d38c519c06816e2712742cec78c8f9c1662feed81b3fcc4a1a
tcpdump-debuginfo-4.9.2-4.el7_7.1.s390x.rpm	SHA-256: 9b4fdc55f2a5256870c966301d461199b49a8eab996e1117921de8a52ba4d673

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
s390x
tcpdump-4.9.2-4.el7_7.1.s390x.rpm	SHA-256: 3ebed20abd9a38d38c519c06816e2712742cec78c8f9c1662feed81b3fcc4a1a
tcpdump-debuginfo-4.9.2-4.el7_7.1.s390x.rpm	SHA-256: 9b4fdc55f2a5256870c966301d461199b49a8eab996e1117921de8a52ba4d673

Red Hat Enterprise Linux for Power, big endian 7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
ppc64
tcpdump-4.9.2-4.el7_7.1.ppc64.rpm	SHA-256: fa563b5121dd7a823e8e4901b46ca981e4f02fdbe01ed0ccdbe3be1929bc927f
tcpdump-debuginfo-4.9.2-4.el7_7.1.ppc64.rpm	SHA-256: 9b235e46994af2dbb5643065d6a3dc6ac2c146b0d290b1772abb31e38545b5e2

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
ppc64
tcpdump-4.9.2-4.el7_7.1.ppc64.rpm	SHA-256: fa563b5121dd7a823e8e4901b46ca981e4f02fdbe01ed0ccdbe3be1929bc927f
tcpdump-debuginfo-4.9.2-4.el7_7.1.ppc64.rpm	SHA-256: 9b235e46994af2dbb5643065d6a3dc6ac2c146b0d290b1772abb31e38545b5e2

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
x86_64
tcpdump-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 09728df5b04e03f212a1a8be620b5ea3c97515c50e73cb079ec936ee174ba61d
tcpdump-debuginfo-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 9c060696c950425af99ecc273d73fc33566c9ab2bad65c5d4c09fd67717e9eca

Red Hat Enterprise Linux for Power, little endian 7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
ppc64le
tcpdump-4.9.2-4.el7_7.1.ppc64le.rpm	SHA-256: 02d08249465f55e7a49c07b8fa01dfb53dd803e1663d6d6998dbed1ccfd30149
tcpdump-debuginfo-4.9.2-4.el7_7.1.ppc64le.rpm	SHA-256: 302e5a1f854400ea8e14d206b105843ae0102b774f3a7597919cf70eaa58959a

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
ppc64le
tcpdump-4.9.2-4.el7_7.1.ppc64le.rpm	SHA-256: 02d08249465f55e7a49c07b8fa01dfb53dd803e1663d6d6998dbed1ccfd30149
tcpdump-debuginfo-4.9.2-4.el7_7.1.ppc64le.rpm	SHA-256: 302e5a1f854400ea8e14d206b105843ae0102b774f3a7597919cf70eaa58959a

Red Hat Enterprise Linux Server - TUS 7.7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
x86_64
tcpdump-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 09728df5b04e03f212a1a8be620b5ea3c97515c50e73cb079ec936ee174ba61d
tcpdump-debuginfo-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 9c060696c950425af99ecc273d73fc33566c9ab2bad65c5d4c09fd67717e9eca

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
s390x
tcpdump-4.9.2-4.el7_7.1.s390x.rpm	SHA-256: 3ebed20abd9a38d38c519c06816e2712742cec78c8f9c1662feed81b3fcc4a1a
tcpdump-debuginfo-4.9.2-4.el7_7.1.s390x.rpm	SHA-256: 9b4fdc55f2a5256870c966301d461199b49a8eab996e1117921de8a52ba4d673

Red Hat Enterprise Linux EUS Compute Node 7.7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
x86_64
tcpdump-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 09728df5b04e03f212a1a8be620b5ea3c97515c50e73cb079ec936ee174ba61d
tcpdump-debuginfo-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 9c060696c950425af99ecc273d73fc33566c9ab2bad65c5d4c09fd67717e9eca

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
ppc64le
tcpdump-4.9.2-4.el7_7.1.ppc64le.rpm	SHA-256: 02d08249465f55e7a49c07b8fa01dfb53dd803e1663d6d6998dbed1ccfd30149
tcpdump-debuginfo-4.9.2-4.el7_7.1.ppc64le.rpm	SHA-256: 302e5a1f854400ea8e14d206b105843ae0102b774f3a7597919cf70eaa58959a

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
x86_64
tcpdump-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 09728df5b04e03f212a1a8be620b5ea3c97515c50e73cb079ec936ee174ba61d
tcpdump-debuginfo-4.9.2-4.el7_7.1.x86_64.rpm	SHA-256: 9c060696c950425af99ecc273d73fc33566c9ab2bad65c5d4c09fd67717e9eca

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
ppc64
tcpdump-4.9.2-4.el7_7.1.ppc64.rpm	SHA-256: fa563b5121dd7a823e8e4901b46ca981e4f02fdbe01ed0ccdbe3be1929bc927f
tcpdump-debuginfo-4.9.2-4.el7_7.1.ppc64.rpm	SHA-256: 9b235e46994af2dbb5643065d6a3dc6ac2c146b0d290b1772abb31e38545b5e2

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
tcpdump-4.9.2-4.el7_7.1.src.rpm	SHA-256: 945e9471d58877f5886e9ac3b112c009604040080cca6b1d8872ce0270845240
ppc64le
tcpdump-4.9.2-4.el7_7.1.ppc64le.rpm	SHA-256: 02d08249465f55e7a49c07b8fa01dfb53dd803e1663d6d6998dbed1ccfd30149
tcpdump-debuginfo-4.9.2-4.el7_7.1.ppc64le.rpm	SHA-256: 302e5a1f854400ea8e14d206b105843ae0102b774f3a7597919cf70eaa58959a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.