CVE-2020-8037 ppp decapsulator can be convinced to allocate a large amount of memory

High 7.5 Published 4 Nov 2020 Updated 16 Sep 2024

Attackers can cause excessive memory allocation in tcpdump's PPP decapsulator, leading to denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2020-8037?

CVE-2020-8037 is a high-severity denial of service vulnerability in Apple Mac Os X, published on 4 Nov 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.

Weakness: CWE-770

Which versions are affected by CVE-2020-8037?

It affects 5 products.

Linux distribution packages (9)

`tcpdump` AlmaLinux:8	All versions	`14:4.9.3-2.el8`
`tcpdump` Red Hat:enterprise_linux:8::appstream	All versions	`14:4.9.3-2.el8`
`tcpdump-debuginfo` Red Hat:enterprise_linux:8::appstream	All versions	`14:4.9.3-2.el8`
`tcpdump-debugsource` Red Hat:enterprise_linux:8::appstream	All versions	`14:4.9.3-2.el8`
`tcpdump` Rocky Linux:8	All versions	`4:4.9.3-2.el8`
`tcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP1	All versions	`4.9.2-3.12.1`
`tcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP2	All versions	`4.9.2-3.12.1`
`tcpdump` openSUSE:Leap 15.1	All versions	`4.9.2-lp151.4.9.1`
`tcpdump` openSUSE:Leap 15.2	All versions	`4.9.2-lp152.7.3.1`

Products include Apple Mac Os X, Apple Macos, Debian Debian Linux, Fedoraproject Fedora, Tcpdump Tcpdump.

How do I fix CVE-2020-8037?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2020-8037 being exploited?

There is no known exploitation of CVE-2020-8037 in the wild and no public exploit code.

All Apple Mac Os X vulnerabilities

Sources

Also known as ALPINE-CVE-2020-8037, ALSA-2021:4236, AZL-6905, DEBIAN-CVE-2020-8037, DLA-2444-1, GHSA-qggh-75q9-j3rf and 7 more.