pkg/57586: tcpdump used in this NetBSD is vulnerable

[thresh416%outlook.com@localhost]

>Number:         57586
>Category:       pkg
>Synopsis:       tcpdump used in this NetBSD is vulnerable
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Aug 16 12:05:00 +0000 2023
>Originator:     ChenHao Lu
>Release:        trunk
>Organization:
Fudan University
>Environment:
>Description:
As CVE-2020-8037 described, the ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory, which is still used in this project.
This can be easily fixed by apply the patch of this CVE ( CVE-2020-8037 ).
CVE-2020-8037's description:https://nvd.nist.gov/vuln/detail/CVE-2020-8037
CVE-2020-8037's patch commit:https://github.com/the-tcpdump-group/tcpdump/commit/32027e199368dad9508965aae8cd8de5b6ab5231
>How-To-Repeat:

>Fix: