CVE-2020-8036

An out-of-bounds read vulnerability was discovered in tcpdump while printing SOME/IP packets captured in a pcap file or coming from the network. This flaw allows a remote attacker to send specially crafted packets that, when printed, can trigger the flaw and crash the application. The highest threat from this vulnerability is to system availability.

This issue did not affect the versions of tcpdump as shipped with Red Hat Enterprise Linux 5, 6, 7, and 8, as they did not include support for the SOME/IP dissector.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.