Description
The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
Published: 2019-10-03
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-1955-1 tcpdump security update
Debian DSA Debian DSA DSA-4547-1 tcpdump security update
EUVD EUVD EUVD-2018-6379 The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
Ubuntu USN Ubuntu USN USN-4252-1 tcpdump vulnerabilities
Ubuntu USN Ubuntu USN USN-4252-2 tcpdump vulnerabilities
History

Wed, 03 Dec 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Subscriptions

Apple Mac Os X
Debian Debian Linux
F5 Traffix Signaling Delivery Controller
Fedoraproject Fedora
Opensuse Leap
Redhat Enterprise Linux
Tcpdump Tcpdump
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-12-03T21:03:17.761Z

Reserved: 2018-07-20T00:00:00.000Z

Link: CVE-2018-14462

cve-icon Vulnrichment

Updated: 2024-08-05T09:29:51.278Z

cve-icon NVD

Status : Modified

Published: 2019-10-03T16:15:11.490

Modified: 2025-12-03T21:15:49.143

Link: CVE-2018-14462

cve-icon Redhat

Severity : Low

Publid Date: 2019-10-02T00:00:00Z

Links: CVE-2018-14462 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses