The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.

f5 1

veracode 1

osv 3

cve 1

openvas 28

nessus 32

suse 5

cbl_mariner 2

debiancve 1

prion 1

ubuntucve 1

redhatcve 1