This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2018-14938 →
DEBIAN-CVE-2018-14938
An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism during capl...
Original description
The description as published by the source.
An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle_80211, which will result in an out-of-bounds read and may allow access to sensitive memory (or a denial of service).
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
tcpflow
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0+repack1-1"}]}]
Debian:13
tcpflow
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0+repack1-1"}]}]
Debian:14
tcpflow
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0+repack1-1"}]}]
References
- advisory security-tracker.debian.org