USN-4252-2: tcpdump vulnerabilities

Published Jan 27, 2020

Updated

USN-4252-1 fixed several vulnerabilities in tcpdump. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Multiple security issues were discovered in tcpdump. A remote attacker could use these issues to cause tcpdump to crash, resulting in a denial of service, or possibly execute arbitrary code.

Affected Software

1 affected component

tcpdump tcpdump

Event History

Dec 4, 2025

Advisory Published

via Ubuntu·06:58 PM

Data Sourced

via Ubuntu·06:58 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What is the vulnerability ID for this update?

The vulnerability ID for this update is USN-4252-2.

What is tcpdump?

tcpdump is a powerful command-line packet analyzer.

What are the affected versions of Ubuntu?

Ubuntu 12.04 and Ubuntu 14.04 are affected.

What is the severity of this vulnerability?

The severity of this vulnerability is not specified in the description.

How do I fix this vulnerability?

To fix this vulnerability, update tcpdump to version 4.9.3-0ubuntu0.14.04.1+esm1 for Ubuntu 14.04, and version 4.9.3-0ubuntu0.12.04.1 for Ubuntu 12.04.