CVE-2020-8037: Apple Mac OS X

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.

Affected products

• Apple Mac OS X: before 10.14.6 (fixed in 10.14.6); from 10.15, before 10.15.7 (fixed in 10.15.7); version 10.14.6 only; version 10.15.7 only
• Apple macOS: from 11.0, before 11.3 (fixed in 11.3)
• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 32 only; version 33 only
• Tcpdump Tcpdump: version 4.9.3 only

Published 2020-11-04. Last modified 2026-06-17.