CVE-2019-1010220
tcpdump: buffer over-read in function print_prefix in print-hncp.c
Severity
UnknownRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · August 1, 2019
Updated · November 22, 2025
Description
tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file.
Statement
This flaw was found to be a duplicate of CVE-2018-19519. Please see https://access.redhat.com/security/cve/CVE-2018-19519 for information about affected products and security errata.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 5.4CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
CWE-125 · Out-of-bounds Read