Tcpdump
by Tcpdump
Source repositories
CVEs (192)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2016-7933 | Cri | 0.64 | 9.8 | 0.03 | Jan 28, 2017 | The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print(). | ||
| CVE-2016-7932 | Cri | 0.64 | 9.8 | 0.03 | Jan 28, 2017 | The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum(). | ||
| CVE-2016-7931 | Cri | 0.64 | 9.8 | 0.03 | Jan 28, 2017 | The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print(). | ||
| CVE-2016-7930 | Cri | 0.64 | 9.8 | 0.03 | Jan 28, 2017 | The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print(). | ||
| CVE-2016-7929 | Cri | 0.64 | 9.8 | 0.03 | Jan 28, 2017 | The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper_parse_header(). | ||
| CVE-2016-7928 | Cri | 0.64 | 9.8 | 0.03 | Jan 28, 2017 | The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print(). | ||
| CVE-2016-7927 | Cri | 0.64 | 9.8 | 0.03 | Jan 28, 2017 | The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print(). | ||
| CVE-2016-7926 | Cri | 0.64 | 9.8 | 0.03 | Jan 28, 2017 | The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertype_print(). | ||
| CVE-2016-7925 | Cri | 0.64 | 9.8 | 0.03 | Jan 28, 2017 | The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl_if_print(). | ||
| CVE-2016-7924 | Cri | 0.64 | 9.8 | 0.03 | Jan 28, 2017 | The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print(). | ||
| CVE-2016-7923 | Cri | 0.64 | 9.8 | 0.03 | Jan 28, 2017 | The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print(). | ||
| CVE-2016-7922 | Cri | 0.64 | 9.8 | 0.03 | Jan 28, 2017 | The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print(). | ||
| CVE-2017-12989 | Hig | 0.49 | 7.5 | 0.02 | Sep 14, 2017 | The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length(). | ||
| CVE-2017-11108 | Hig | 0.49 | 7.5 | 0.05 | Jul 8, 2017 | tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol. | ||
| CVE-2018-14882 | Hig | 0.42 | 7.5 | 0.04 | Oct 3, 2019 | The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c. | ||
| CVE-2018-14881 | Hig | 0.42 | 7.5 | 0.05 | Oct 3, 2019 | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART). | ||
| CVE-2018-14880 | Hig | 0.42 | 7.5 | 0.05 | Oct 3, 2019 | The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr(). | ||
| CVE-2018-14470 | Hig | 0.42 | 7.5 | 0.04 | Oct 3, 2019 | The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2(). | ||
| CVE-2018-14469 | Hig | 0.42 | 7.5 | 0.05 | Oct 3, 2019 | The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print(). | ||
| CVE-2018-14468 | Hig | 0.42 | 7.5 | 0.04 | Oct 3, 2019 | The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print(). |
- risk 0.64cvss 9.8epss 0.03
The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print().
- risk 0.64cvss 9.8epss 0.03
The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum().
- risk 0.64cvss 9.8epss 0.03
The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().
- risk 0.64cvss 9.8epss 0.03
The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print().
- risk 0.64cvss 9.8epss 0.03
The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper_parse_header().
- risk 0.64cvss 9.8epss 0.03
The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print().
- risk 0.64cvss 9.8epss 0.03
The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print().
- risk 0.64cvss 9.8epss 0.03
The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertype_print().
- risk 0.64cvss 9.8epss 0.03
The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl_if_print().
- risk 0.64cvss 9.8epss 0.03
The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print().
- risk 0.64cvss 9.8epss 0.03
The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print().
- risk 0.64cvss 9.8epss 0.03
The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print().
- risk 0.49cvss 7.5epss 0.02
The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().
- risk 0.49cvss 7.5epss 0.05
tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.
- risk 0.42cvss 7.5epss 0.04
The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.
- risk 0.42cvss 7.5epss 0.05
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).
- risk 0.42cvss 7.5epss 0.05
The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
- risk 0.42cvss 7.5epss 0.04
The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().
- risk 0.42cvss 7.5epss 0.05
The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
- risk 0.42cvss 7.5epss 0.04
The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
Page 7 of 10