CVE-2018-19519: In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via cr...

Security readout for executives and security teams

CVE-2018-19519 affects tcpdump 4.9.2, where crafted packet data can trigger a stack-based buffer over-read in HNCP prefix printing. For executives, the likely business issue is disruption or unsafe handling in packet capture workflows, not confirmed broad compromise. Public sources do not show KEV-listed active exploitation. Exposure is most likely where tcpdump 4.9.2 or vendor-packaged tcpdump builds process untrusted packet captures or live network traffic. Fedora, Red Hat, Ubuntu, and Pulse Secure references indicate downstream distribution impact, but the bundle does not enumerate exact vulnerable package versions. Handle through normal vulnerability remediation with moderate priority. Escalate if tcpdump is exposed to hostile traffic analysis, used in automated capture pipelines, or embedded in security appliances without current vendor patches. Mitigation focus: Identify systems and appliances with tcpdump installed or bundled.; Prioritize vendor tcpdump updates from Fedora, Red Hat, Ubuntu, or product suppliers.; Avoid processing untrusted packet captures with outdated tcpdump builds..

Prepared

Jun 6, 2026, 22:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.