High
Security advisory
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-8037
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:29 UTC · Revision 1
Source evidence
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
osv:CVE-2020-8037
Complete source record
{
"id": "a5a5f8ae9b16bd27acb607573a8de43753119681177a42fce4873ec39365efc1",
"url": "https://osv.dev/vulnerability/CVE-2020-8037",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-8037",
"summary": "The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.",
"evidence": "osv:CVE-2020-8037",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2020-8037",
"aliases": [
"CVE-2020-8037"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/the-tcpdump-group/tcpdump",
"type": "GIT",
"events": [
{
"introduced": "d9a693b043262f1999ee7aba28acadfd0f77cc38"
},
{
"last_affected": "d9a693b043262f1999ee7aba28acadfd0f77cc38"
},
{
"fixed": "32027e199368dad9508965aae8cd8de5b6ab5231"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:tcpdump:tcpdump:4.9.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.9.3"
},
{
"last_affected": "4.9.3"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "32027e199368dad9508965aae8cd8de5b6ab5231"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"4.9.3",
"tcpdump-4.9.3"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8037.json",
"vanir_signatures": [
{
"id": "CVE-2020-8037-625654ac",
"digest": {
"length": 1251,
"function_hash": "114072365358220823879709176952693676320"
},
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/32027e199368dad9508965aae8cd8de5b6ab5231",
"target": {
"file": "print-ppp.c",
"function": "ppp_hdlc"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2020-8037-df93f99f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"75602926860762894768813751569532021359",
"9867738560598064159077092336868710730",
"226286868117138916932261892023417786878",
"312535365908525278831835037643938069206",
"193708830256193212648148804585932547330",
"225582233472056077528484568223799068742",
"87512221018872648189638407990642100373",
"331997209997900974668790162158431339155",
"32254091627956064590784894660703272575",
"275556175249599490980814440375788132190",
"79058067046007865613622272898805451482",
"96770968572884396529904239864250777959",
"15054595184741052885796942294073694432",
"169938687647837023712455514535228888440",
"179516277381903108913256904174120081207",
"188861693945644257165746229702332158795",
"241755533398317547277580406153182923367",
"277299685682914552613762330927893646226",
"43450640239716668424840137206990379970",
"169909079340584079484773553150578196492"
]
},
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/32027e199368dad9508965aae8cd8de5b6ab5231",
"target": {
"file": "print-ppp.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:51:03Z"
}
}
],
"modified": "2026-10-24T14:51:03.005788386Z",
"provider": "osv",
"references": [
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2MX34MJIUJQGL6CMEPLTKFOOOC3CJ4Z/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWDBONZVLC6BAOR2KM376DJCM4H3FERV/",
"https://lists.debian.org/debian-lts-announce/2020/11/msg00018.html",
"https://support.apple.com/kb/HT212325",
"https://support.apple.com/kb/HT212326",
"https://support.apple.com/kb/HT212327",
"https://github.com/the-tcpdump-group/tcpdump/commit/32027e199368dad9508965aae8cd8de5b6ab5231"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*"
],
"vendor_product": "apple:mac_os_x",
"extracted_events": [
{
"range": [
{
"fixed": "10.14.6"
},
{
"introduced": "10.15"
},
{
"fixed": "10.15.7"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
],
"vendor_product": "apple:macos",
"extracted_events": [
{
"range": [
{
"introduced": "11.0"
},
{
"fixed": "11.3"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-001:*:*:*:*:*:*",
"cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
"cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
"cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*",
"cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*"
],
"vendor_product": "apple:mac_os_x",
"extracted_events": [
{
"range": [
{
"introduced": "10.14.6-NA"
},
{
"last_affected": "10.14.6-NA"
},
{
"introduced": "10.14.6-security_update_2019\\-001"
},
{
"last_affected": "10.14.6-security_update_2019\\-001"
},
{
"introduced": "10.14.6-security_update_2019\\-002"
},
{
"last_affected": "10.14.6-security_update_2019\\-002"
},
{
"introduced": "10.14.6-security_update_2020\\-001"
},
{
"last_affected": "10.14.6-security_update_2020\\-001"
},
{
"introduced": "10.14.6-security_update_2020\\-002"
},
{
"last_affected": "10.14.6-security_update_2020\\-002"
},
{
"introduced": "10.14.6-security_update_2020\\-003"
},
{
"last_affected": "10.14.6-security_update_2020\\-003"
},
{
"introduced": "10.14.6-security_update_2020\\-004"
},
{
"last_affected": "10.14.6-security_update_2020\\-004"
},
{
"introduced": "10.14.6-security_update_2020\\-005"
},
{
"last_affected": "10.14.6-security_update_2020\\-005"
},
{
"introduced": "10.14.6-security_update_2020\\-006"
},
{
"last_affected": "10.14.6-security_update_2020\\-006"
},
{
"introduced": "10.14.6-security_update_2020\\-007"
},
{
"last_affected": "10.14.6-security_update_2020\\-007"
},
{
"introduced": "10.14.6-security_update_2021\\-001"
},
{
"last_affected": "10.14.6-security_update_2021\\-001"
},
{
"introduced": "10.15.7-NA"
},
{
"last_affected": "10.15.7-NA"
},
{
"introduced": "10.15.7-security_update_2020\\-001"
},
{
"last_affected": "10.15.7-security_update_2020\\-001"
},
{
"introduced": "10.15.7-security_update_2021\\-001"
},
{
"last_affected": "10.15.7-security_update_2021\\-001"
},
{
"introduced": "10.15.7-supplemental_update"
},
{
"last_affected": "10.15.7-supplemental_update"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"range": [
{
"introduced": "32"
},
{
"last_affected": "32"
},
{
"introduced": "33"
},
{
"last_affected": "33"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:tcpdump:tcpdump:4.9.3:*:*:*:*:*:*:*"
],
"vendor_product": "tcpdump:tcpdump",
"extracted_events": [
{
"range": [
{
"introduced": "4.9.3"
},
{
"last_affected": "4.9.3"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2020-8037",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 443853,
"published_at": "2020-11-04T18:15:20.843+00:00"
}