Tcpdump
by Tcpdump
Source repositories
CVEs (186)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-14880 | 0.00 | — | 0.05 | Oct 3, 2019 | The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr(). | |||
| CVE-2018-14879 | 0.00 | — | 0.05 | Oct 3, 2019 | The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file(). | |||
| CVE-2018-14470 | 0.00 | — | 0.04 | Oct 3, 2019 | The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2(). | |||
| CVE-2018-14469 | 0.00 | — | 0.05 | Oct 3, 2019 | The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print(). | |||
| CVE-2018-14468 | 0.00 | — | 0.04 | Oct 3, 2019 | The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print(). | |||
| CVE-2018-14467 | 0.00 | — | 0.04 | Oct 3, 2019 | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP). | |||
| CVE-2018-14466 | 0.00 | — | 0.04 | Oct 3, 2019 | The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert(). | |||
| CVE-2018-14464 | 0.00 | — | 0.04 | Oct 3, 2019 | The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs(). | |||
| CVE-2018-14463 | 0.00 | — | 0.05 | Oct 3, 2019 | The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167. | |||
| CVE-2018-14461 | 0.00 | — | 0.04 | Oct 3, 2019 | The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print(). | |||
| CVE-2018-10103 | 0.00 | — | 0.04 | Oct 3, 2019 | tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2). | |||
| CVE-2019-1010220 | 0.00 | — | 0.01 | Jul 22, 2019 | tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is:… | |||
| CVE-2018-19519 | 0.00 | — | 0.02 | Nov 25, 2018 | In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization. | |||
| CVE-2015-2154 | 0.00 | — | 0.05 | Mar 24, 2015 | The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value. | |||
| CVE-2014-8769 | 0.00 | — | 0.06 | Nov 20, 2014 | tcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand Distance Vector (AODV) packet, which triggers an out-of-bounds memory access. | |||
| CVE-2014-8767 | 0.00 | — | 0.05 | Nov 20, 2014 | Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame. | |||
| CVE-2007-1218 | 0.00 | — | 0.03 | Mar 2, 2007 | Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but… | |||
| CVE-2004-0183 | 0.00 | — | 0.06 | May 4, 2004 | TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite. | |||
| CVE-2004-0057 | 0.00 | — | 0.05 | Feb 17, 2004 | The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different… | |||
| CVE-2003-0989 | 0.00 | — | 0.05 | Feb 17, 2004 | tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057. |
- CVE-2018-14880Oct 3, 2019risk 0.00cvss —epss 0.05
The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
- CVE-2018-14879Oct 3, 2019risk 0.00cvss —epss 0.05
The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
- CVE-2018-14470Oct 3, 2019risk 0.00cvss —epss 0.04
The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().
- CVE-2018-14469Oct 3, 2019risk 0.00cvss —epss 0.05
The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
- CVE-2018-14468Oct 3, 2019risk 0.00cvss —epss 0.04
The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
- CVE-2018-14467Oct 3, 2019risk 0.00cvss —epss 0.04
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).
- CVE-2018-14466Oct 3, 2019risk 0.00cvss —epss 0.04
The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().
- CVE-2018-14464Oct 3, 2019risk 0.00cvss —epss 0.04
The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().
- CVE-2018-14463Oct 3, 2019risk 0.00cvss —epss 0.05
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.
- CVE-2018-14461Oct 3, 2019risk 0.00cvss —epss 0.04
The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().
- CVE-2018-10103Oct 3, 2019risk 0.00cvss —epss 0.04
tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).
- CVE-2019-1010220Jul 22, 2019risk 0.00cvss —epss 0.01
tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is:…
- CVE-2018-19519Nov 25, 2018risk 0.00cvss —epss 0.02
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
- CVE-2015-2154Mar 24, 2015risk 0.00cvss —epss 0.05
The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.
- CVE-2014-8769Nov 20, 2014risk 0.00cvss —epss 0.06
tcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand Distance Vector (AODV) packet, which triggers an out-of-bounds memory access.
- CVE-2014-8767Nov 20, 2014risk 0.00cvss —epss 0.05
Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame.
- CVE-2007-1218Mar 2, 2007risk 0.00cvss —epss 0.03
Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but…
- CVE-2004-0183May 4, 2004risk 0.00cvss —epss 0.06
TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.
- CVE-2004-0057Feb 17, 2004risk 0.00cvss —epss 0.05
The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different…
- CVE-2003-0989Feb 17, 2004risk 0.00cvss —epss 0.05
tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.
Page 9 of 10