huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2020-5238: cmark-gfm: Exponential time to parse certain inputs could lead to DoS
Component: cmark-gfm
Severity: Moderate
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2020-07-01T00:00:00+00:00

The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue does not affect the upstream cmark project. The issue has been fixed in version 0.29.0.gfm.1.


Affected upstream versions: < 0.29.0.gfm.1
Fixed upstream versions: 0.29.0.gfm.1
Upstream repository: https://github.com/github/cmark-gfm
Upstream fix commit: 85d895289c5ab67f988ca659493a64abb5fec7b4
CVE-2020-5260: git: Crafted URL containing new lines can cause credential leak
Component: git
Severity: Important
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Public date: 2020-04-14T18:00:00+00:00

A flaw was found in git. Credentials can be leaked through the use of a crafted URL that contains a newline, fooling the credential helper to give information for a different host. Highest threat from the vulnerability is to data confidentiality.

Statement: Red Hat Enterprise Linux 6 is not affected by this flaw as the vulnerable version of git, version 1.7.9-rc0 and later, was never packaged for this instance of RHEL.

Affected upstream versions: < 2.17.4, >= 2.18.0, < 2.18.3, >= 2.19.0, 2.19.4, >= 2.20.0, < 2.20.3, >= 2.21.0, < 2.21.2, >= 2.22.0, < 2.22.3, >= 2.23.0, < 2.23.2, >= 2.24.0, < 2.24.2, >= 2.25.0, < 2.25.3, >= 2.26.0, < 2.26.1
Fixed upstream versions: v2.17.4
Upstream repository: https://github.com/git/git
Upstream fix commit: 9a6bbee8006c24b46a85d29e7b38cfa79e9ab21b
CVE-2020-5267: rubygem-actionview: views that use the `j` or `escape_javascript` methods are susceptible to XSS attacks
Component: rubygem-actionview
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
CVSS v3: 4.8 (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Public date: 2020-03-19T00:00:00+00:00

A flaw was found in rubygem-actionview. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks with ActionView's JavaScript literal escape helpers. The highest threat from this vulnerability is to data confidentiality and integrity.

Statement: Red Hat CloudForms and Satellite ship affected RubyGem actionview with methods, however, those are not vulnerable since none of those uses template string enclosed with backtick characters. A future update may fix affected RubyGem.

Affected upstream versions: < 5.2.4.2, >= 6.0.0, < 6.0.2.2
Fixed upstream versions: v6.1.0
Upstream repository: https://github.com/rails/rails
Upstream fix commit: 033a738817abd6e446e1b320cb7d1a5c15224e9a
CVE-2020-5310: python-pillow: Integer overflow leading to buffer overflow in ImagingLibTiffDecode
Component: python-pillow
Severity: Important
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 8.1 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2020-01-03T00:00:00+00:00

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.

Statement: This issue did not affect the versions of python-pillow as shipped with Red Hat Enterprise Linux 5, 6, 7, and 8 as they did not include support for tiled TIFF images, where the flaw lies.

Affected upstream versions: n/a
Fixed upstream versions: 6.2.2
Upstream repository: https://github.com/python-pillow/Pillow
Upstream fix commit: 4e2def2539ec13e53a82e06c4b3daf00454100c4
CVE-2020-5311: python-pillow: out-of-bounds write in expandrow in libImaging/SgiRleDecode.c
Component: python-pillow
Severity: Important
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2020-01-03T00:00:00+00:00

An out-of-bounds write flaw was discovered in python-pillow in the way SGI RLE images are decoded. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the application or potentially execute code on the system.

Statement: This issue did not affect the versions of python-pillow and python-imaging as shipped with Red Hat Enterprise Linux 6, and 7 as they did not include the SGI RLE image decoder, where the flaw lies.

Affected upstream versions: n/a
Fixed upstream versions: 6.2.2
Upstream repository: https://github.com/python-pillow/Pillow
Upstream fix commit: a79b65c47c7dc6fe623aadf09aa6192fc54548f3
CVE-2020-5312: python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c
Component: python-pillow
Severity: Important
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
CVSS v3: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2020-01-03T00:00:00+00:00

A flaw was discovered in python-pillow does where it does not properly restrict operations within the bounds of a memory buffer when decoding PCX images. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the application or potentially execute code on the system.


Affected upstream versions: n/a
Fixed upstream versions: 6.2.2
Upstream repository: https://github.com/python-pillow/Pillow
Upstream fix commit: 93b22b846e0269ee9594ff71a72bec02d2bea8fd
CVE-2020-5313: python-pillow: out-of-bounds read in ImagingFliDecode when loading FLI images
Component: python-pillow
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 8.2 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Public date: 2020-01-03T00:00:00+00:00

An out-of-bounds read was discovered in python-pillow in the way it decodes FLI images. An application that uses python-pillow to load untrusted images may be vulnerable to this flaw, which can allow an attacker to read the memory of the application they should be not allowed to read.


Affected upstream versions: n/a
Fixed upstream versions: 6.2.2
Upstream repository: https://github.com/python-pillow/Pillow
Upstream fix commit: a09acd0decd8a87ccce939d5ff65dab59e7d365b
CVE-2020-6950: Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371
Component: Mojarra
Severity: Moderate
CWE: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Public date: 2020-02-20T00:00:00+00:00

A flaw was found in Eclipse Mojarra before version 2.3.14, where it is vulnerable to a path traversal flaw via the loc parameter or the con parameter. An attacker could exploit this flaw to read arbitrary files.


Affected upstream versions: n/a
Fixed upstream versions: 2.3.3.102
Upstream repository: https://github.com/eclipse-ee4j/mojarra
Upstream fix commit: 1b434748d9239f42eae8aa7d37d7a0930c061e24
CVE-2020-7039: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()
Component: QEMU
Severity: Important
CWE: CWE-122 (Heap-based Buffer Overflow)
CVSS v3: 5.6 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Public date: 2020-01-07T00:00:00+00:00

A heap buffer overflow issue was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the tcp_emu() routine while emulating IRC and other protocols. An attacker could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential execution of arbitrary code with privileges of the QEMU process.

Statement: This issue affects user-mode or SLiRP networking implementation of the QEMU emulator. Though qemu-kvm package is built with SLiRP networking support, due to its limitations, it is not used by the virtual machine guests by default.

This issue affects versions of the qemu-kvm package as shipped with Red Hat Enterprise Linux 5, 6, 7, 8 and Red Hat Enterprise Linux Advanced Virtualization 8. Future qemu-kvm package updates for Red Hat Enterprise Linux 6, 7, 8 and Red Hat Enterprise Linux Advanced Virtualization 8 may address this issue.

Red Hat Enterprise Linux 5 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This issue is currently not planned to be addressed in its future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Red Hat OpenStack Platform:                                                                                                                 
* This flaw impacts KVM user-mode or SLIRP networking, which is not used in Red Hat OpenStack Platform. Although updating is recommended for affected versions (see below), Red Hat OpenStack Platform environments are not vulnerable.

Affected upstream versions: n/a
Fixed upstream versions: v4.2.0
Upstream repository: https://gitlab.freedesktop.org/slirp/libslirp
Upstream fix commit: ce131029d6d4a405cb7d3ac6716d03e58fb4a5d9
CVE-2020-7053: kernel: use-after-free in i915_ppgtt_close in drivers/gpu/drm/i915/i915_gem_gtt.c
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2020-01-14T00:00:00+00:00

A use-after-free flaw was found in the Linux kernel’s GPU driver functionality when destroying GEM context. A local user could use this flaw to crash the system or potentially escalate their privileges.

Statement: The impact of this issue is Moderate, because attack is specific for certain Intel hardware and could be triggered only by local user with write access to the device.

Affected upstream versions: n/a
Fixed upstream versions: v5.2
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 7dc40713618c884bf07c030d1ab1f47a9dc1f310
CVE-2020-7211: QEMU: Slirp: potential directory traversal using relative paths via tftp server on Windows host
Component: QEMU
Severity: Low
CWE: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
CVSS v3: 3.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N)
Public date: 2019-12-30T00:00:00+00:00

A potential directory traversal issue was found in the tftp server of the SLiRP user-mode networking implementation used by QEMU. It could occur on a Windows host, as it allows the use of both forward ('/') and backward slash('\') tokens as separators in a file path. A user able to access the tftp server could use this flaw to access undue files by using relative paths.

Statement: This issue affects user-mode or SLiRP networking implementation of the QEMU emulator. Though qemu-kvm package is built with SLiRP networking support, due to its limitations, it is not used by the virtual machine guests by default.

This issue does not affect the versions of the qemu-kvm package as shipped with Red Hat Enterprise Linux 5, 6, 7, 8, Red Hat OpenStack, Red Hat Virtualization and Red Hat Enterprise Linux Advanced Virtualization 8.

Affected upstream versions: n/a
Fixed upstream versions: v4.2.0
Upstream repository: https://gitlab.freedesktop.org/slirp/libslirp
Upstream fix commit: 14ec36e107a8c9af7d0a80c3571fe39b291ff1d4
CVE-2020-7226: cryptacular: excessive memory allocation during a decode operation
Component: cryptacular
Severity: Moderate
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2020-01-24T00:00:00+00:00

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data.


Affected upstream versions: n/a
Fixed upstream versions: v6.1.5
Upstream repository: https://github.com/apereo/cas
Upstream fix commit: 8810f2b6c71d73341d4dde6b09a18eb46cfd6d45
CVE-2020-7595: libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations
Component: libxml2
Severity: Moderate
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2020-01-21T00:00:00+00:00

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.11
Upstream repository: https://gitlab.gnome.org/GNOME/libxml2
Upstream fix commit: 0e1a49c89076
CVE-2020-7660: npm-serialize-javascript: allows remote attackers to inject arbitrary code via the function deleteFunctions within index.js
Component: npm-serialize-javascript
Severity: Important
CWE: CWE-502 (Deserialization of Untrusted Data)
CVSS v3: 8.1 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2020-04-01T00:00:00+00:00

A flaw was found in the serialize-javascript before version 3.1.0. This flaw allows remote attackers to inject arbitrary code via the function "deleteFunctions" within "index.js."

Statement: Red Hat Quay includes serialize-javascript as a dependency of webpack which is only used at build time. The vulnerable library is not used at runtime meaning this has a low impact on Red Hat Quay.

The currently supported versions of Container Native Virtualization 2 are not affected by this flaw. However, version 2.0, which is no longer supported, is affected.

In OpenShift distributed tracing there is bundled vulnerable version of the serialize-javascript Nodejs package, however access to the vulnerable function is restricted and protected by OpenShift OAuth, hence the impact by this vulnerability is reduced to Low.

In Red Hat OpenShift Logging the openshift-logging/kibana6-rhel8 container bundles many nodejs packages as a build time dependencies, including the serialize-javascript package. 
The vulnerable code is not used hence the impact to OpenShift Logging by this vulnerability is Low.

Affected upstream versions: All versions prior to version 3.1.0
Fixed upstream versions: v3.1.0
Upstream repository: https://github.com/yahoo/serialize-javascript
Upstream fix commit: f21a6fb3ace2353413761e79717b2d210ba6ccbd
CVE-2020-7662: npmjs-websocket-extensions: ReDoS vulnerability in Sec-WebSocket-Extensions parser
Component: npmjs-websocket-extensions
Severity: Moderate
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2020-06-02T00:00:00+00:00

websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other character. This could be abused by an attacker to conduct Regex Denial Of Service (ReDoS) on a single-threaded server by providing a malicious payload with the Sec-WebSocket-Extensions header.

Statement: In both OpenShift Container Platform (OCP) and OpenShift ServiceMesh (OSSM), the grafana and prometheus containers are behind OpenShift OAuth restricting access to the vulnerable websocket-extension to authenticated users only, therefore the impact is Low.

Affected upstream versions: All versions prior to 0.1.4
Fixed upstream versions: 0.1.4
Upstream repository: https://github.com/faye/websocket-extensions-node
Upstream fix commit: 29496f6838bfadfe5a2f85dff33ed0ba33873237
CVE-2020-7663: rubygem-websocket-extensions: ReDoS vulnerability in Sec-WebSocket-Extensions parser
Component: rubygem-websocket-extensions
Severity: Important
CWE: CWE-1333 (Inefficient Regular Expression Complexity)
CVSS v3: 0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N)
Public date: 2020-06-02T00:00:00+00:00

A flaw was found in the websocket-extensions ruby module in versions prior to 0.1.5. The parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and another character. When abused by an attacker, a Regex denial of service on a single-threaded server could occur. The highest threat from this vulnerability is to system availability.

Statement: Red Hat CloudForms 4.7 (CFME 5.10) is in the maintenance phase and we will not be fixing Medium/Low impact security bugs. Reference: https://access.redhat.com/support/policy/updates/cloudforms

Red Hat Satellite 6 ships affected RubyGem Websocket-extensions, however, product is not vulnerable to the flaw. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification

Affected upstream versions: All versions prior to 0.1.5
Fixed upstream versions: 0.1.5
Upstream repository: https://github.com/faye/websocket-extensions-ruby
Upstream fix commit: aa156a439da681361ed6f53f1a8131892418838b
CVE-2020-7692: google-oauth-client: missing PKCE support in accordance with the RFC for OAuth 2.0 for Native Apps can lead to improper authorization
Component: google-oauth-client
Severity: Important
CWE: CWE-306 (Missing Authentication for Critical Function)
CVSS v3: 7.4 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Public date: 2020-07-03T00:00:00+00:00

PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the authorization code returned by an authorization server is not enough to guarantee that the client that issued the initial authorization request is the one that will be authorized. An attacker is able to obtain the authorization code using a malicious app on the client-side and use it to gain authorization to the protected resource. This affects the package com.google.oauth-client:google-oauth-client before 1.31.0.


Affected upstream versions: unspecified < 1.31.0
Fixed upstream versions: 1.31.0
Upstream repository: https://github.com/googleapis/google-oauth-java-client
Upstream fix commit: 13433cd7dd06267fc261f0b1d4764f8e3432c824
CVE-2020-7733: nodejs-ua-parser-js: Regular expression denial of service via the regex
Component: nodejs-ua-parser-js
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2020-09-12T00:00:00+00:00

A flaw was found in nodejs-ua-parser-js. The software is vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.

Statement: Red Hat OpenShift Container Platform 4 delivers the kibana package where the ua-parser-js library is bundled, but during the update to container first (to openshift4/ose-logging-kibana6) the dependency was removed and hence kibana package is marked as wontfix. This may be fixed in the future.

Affected upstream versions: unspecified < 0.7.22
Fixed upstream versions: 0.7.22
Upstream repository: https://github.com/faisalman/ua-parser-js
Upstream fix commit: 233d3bae22a795153a7e6638887ce159c63e557d
CVE-2020-7743: mathjs: prototype pollution via the deepExtend function that runs upon configuration updates
Component: mathjs
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 7.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Public date: 2020-10-07T00:00:00+00:00

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.


Affected upstream versions: unspecified < 7.5.1
Fixed upstream versions: 7.5.1
Upstream repository: https://github.com/josdejong/mathjs
Upstream fix commit: ecb80514e80bce4e6ec7e71db8ff79954f07c57e
CVE-2020-7754: nodejs-npm-user-validate: improper input validation when validating user emails leads to ReDoS
Component: nodejs-npm-user-validate
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2020-10-16T00:00:00+00:00

This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.

Statement: In Red Hat Enterprise Linux 8 and Software Collections, `npm-user-validate` is used exclusively for `npm`. As a result, this vulnerability is considered Low in such a context.

In OpenShift Container Platform (OCP) 3.11 and 4.4 the kibana package has been marked Low (similar to RHEL8) as it is primarily used for npm and is protected via OpenShift OAuth. Additionally, whilst OCP 4.4 does deliver the kibana package, due to the code changing to container first content, it has been marked as wontfix at this time and may be fixed in a future release. 

Additionally, the openshift4/ose-logging-kibana6 container is not represented on the CVE page as it gets npm from the Red Hat Software Collections and as such the ose-logging-kibana6 container will be updated when the rh-nodejs10-nodejs package is.

Affected upstream versions: unspecified < 1.0.1
Fixed upstream versions: 1.0.1
Upstream repository: https://github.com/npm/npm-user-validate
Upstream fix commit: c8a87dac1a4cc6988b5418f30411a8669bef204e
CVE-2020-7788: nodejs-ini: Prototype pollution via malicious INI file
Component: nodejs-ini
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 7.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Public date: 2020-12-08T00:00:00+00:00

A flaw was found in nodejs-ini. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.

Statement: Node.JS packages in Red Hat Enterprise Linux and Red Hat Software Collections included the vulnerable dependency packaged in "nodejs-npm" component. Processing malicious files using npm could potentially trigger this vulnerability. The "ini" package bundled with npm was not in the library path where it could be included directly in other programs.

The nodejs-nodemon packages in Red Hat Enterprise Linux and Red Hat Software Collections are affected by this vulnerability as they bundle the nodejs-ini library.  Usage of that library is governed by nodemon itself, so applications started by nodemon are not impacted.  Further, nodemon is a developer tool not intended to be used in production.

The ini package is included in Red Hat Quay by protractor and webpack-cli, both of which are dev dependencies.

Affected upstream versions: unspecified < 1.3.6
Fixed upstream versions: 1.3.6
Upstream repository: https://github.com/npm/ini
Upstream fix commit: 56d2805e07ccd94e2ba0984ac9240ff02d44b6f1
CVE-2020-8037: tcpdump: ppp decapsulator can be convinced to allocate a large amount of memory
Component: tcpdump
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2020-04-20T00:00:00+00:00

A flaw was found in tcpdump while printing PPP packets captured in a pcap file or coming from the network. This flaw allows a remote attacker to send specially crafted packets that, when printed, can lead the application to allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.


Affected upstream versions: 4.9.3
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 32027e199368dad9508965aae8cd8de5b6ab5231