In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of…

Description

In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.

Scores

EPSS (exploitation in 30 days)

2.6% · top 15% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

• n/a
• CWE-125 (opens in a new tab)All about CWE-125 and its CVEs
• CWE-909 (opens in a new tab)All about CWE-909 and its CVEs

Affected products

• n/a

  • affected n/a

References (9)

• 106098 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• https://github.com/zyingp/temp/blob/master/tcpdump.md (opens in a new tab)x_refsource_MISCx_transferred
• FEDORA-2019-85d92df70f (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• FEDORA-2019-d06bc63433 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• FEDORA-2019-6db0d5b9d9 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• RHSA-2019:3976 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• USN-4252-2 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• USN-4252-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516 (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2018-19519](https://trackcve.app/badge/CVE-2018-19519.svg)](https://trackcve.app/cve/CVE-2018-19519)

Record last updated 5 Aug 2024, 11:37 UTC.