Lucene search

K

Tcpdump Security Vulnerabilities

cve
cve

CVE-2024-2397

Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to...

6.2CVSS

6.1AI Score

0.0004EPSS

2024-04-12 02:15 PM
28
cve
cve

CVE-2023-1801

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network...

6.5CVSS

6.4AI Score

0.002EPSS

2023-04-07 09:15 PM
33
cve
cve

CVE-2019-15167

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than...

9.1CVSS

8.7AI Score

0.003EPSS

2022-08-27 06:15 AM
80
14
cve
cve

CVE-2020-8036

The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe...

7.5CVSS

7.5AI Score

0.001EPSS

2020-11-04 06:15 PM
39
cve
cve

CVE-2020-8037

The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of...

7.5CVSS

7.3AI Score

0.007EPSS

2020-11-04 06:15 PM
299
8
cve
cve

CVE-2019-15166

lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds...

7.5CVSS

8.5AI Score

0.005EPSS

2019-10-03 05:15 PM
233
cve
cve

CVE-2018-16228

The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
231
cve
cve

CVE-2018-14881

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print()...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
191
cve
cve

CVE-2018-14470

The Babel parser in tcpdump before 4.9.3 has a buffer over-read in...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
182
cve
cve

CVE-2018-14882

The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
209
cve
cve

CVE-2018-16301

The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of...

7.8CVSS

7.8AI Score

0.001EPSS

2019-10-03 04:15 PM
272
cve
cve

CVE-2018-14880

The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
206
cve
cve

CVE-2018-16227

The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
225
cve
cve

CVE-2018-16300

The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited...

7.5CVSS

8.5AI Score

0.008EPSS

2019-10-03 04:15 PM
193
cve
cve

CVE-2018-16230

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print()...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
202
cve
cve

CVE-2018-16451

The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and...

7.5CVSS

8.7AI Score

0.003EPSS

2019-10-03 04:15 PM
225
cve
cve

CVE-2018-14879

The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in...

7CVSS

8.4AI Score

0.002EPSS

2019-10-03 04:15 PM
217
cve
cve

CVE-2018-16229

The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
235
cve
cve

CVE-2018-16452

The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via...

7.5CVSS

8.5AI Score

0.008EPSS

2019-10-03 04:15 PM
183
cve
cve

CVE-2018-14463

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than...

7.5CVSS

8.7AI Score

0.003EPSS

2019-10-03 04:15 PM
283
9
cve
cve

CVE-2018-14468

The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
223
4
cve
cve

CVE-2018-14464

The LMP parser in tcpdump before 4.9.3 has a buffer over-read in...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
199
cve
cve

CVE-2018-10105

tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of...

9.8CVSS

8.6AI Score

0.012EPSS

2019-10-03 04:15 PM
197
cve
cve

CVE-2018-14461

The LDP parser in tcpdump before 4.9.3 has a buffer over-read in...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
215
cve
cve

CVE-2018-14469

The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
245
cve
cve

CVE-2018-14466

The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
212
cve
cve

CVE-2018-14465

The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
244
cve
cve

CVE-2018-10103

tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of...

9.8CVSS

8.6AI Score

0.012EPSS

2019-10-03 04:15 PM
205
cve
cve

CVE-2018-14462

The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
262
cve
cve

CVE-2018-14467

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print()...

7.5CVSS

8.6AI Score

0.003EPSS

2019-10-03 04:15 PM
204
cve
cve

CVE-2019-1010220

tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must...

3.3CVSS

6.1AI Score

0.001EPSS

2019-07-22 06:15 PM
225
cve
cve

CVE-2018-19519

In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing...

5.5CVSS

5.7AI Score

0.002EPSS

2018-11-25 08:29 PM
257
cve
cve

CVE-2017-16808

tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in...

5.5CVSS

7.1AI Score

0.002EPSS

2017-11-13 09:29 PM
158
cve
cve

CVE-2015-3138

print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process...

7.5CVSS

8.1AI Score

0.005EPSS

2017-09-28 01:29 AM
22
cve
cve

CVE-2017-13052

The CFM parser in tcpdump before 4.9.2 has a buffer over-read in...

9.8CVSS

9.3AI Score

0.009EPSS

2017-09-14 06:29 AM
96
cve
cve

CVE-2017-13688

The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in...

9.8CVSS

9.3AI Score

0.009EPSS

2017-09-14 06:29 AM
80
cve
cve

CVE-2017-13689

The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in...

9.8CVSS

9.3AI Score

0.009EPSS

2017-09-14 06:29 AM
97
cve
cve

CVE-2017-13050

The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in...

9.8CVSS

9.3AI Score

0.009EPSS

2017-09-14 06:29 AM
84
2
cve
cve

CVE-2017-13690

The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several...

9.8CVSS

9.3AI Score

0.009EPSS

2017-09-14 06:29 AM
89
cve
cve

CVE-2017-13049

The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in...

9.8CVSS

9.3AI Score

0.009EPSS

2017-09-14 06:29 AM
87
cve
cve

CVE-2017-13055

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in...

9.8CVSS

9.3AI Score

0.009EPSS

2017-09-14 06:29 AM
77
cve
cve

CVE-2017-13725

The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in...

9.8CVSS

9.3AI Score

0.015EPSS

2017-09-14 06:29 AM
85
cve
cve

CVE-2017-13687

The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in...

9.8CVSS

9.3AI Score

0.015EPSS

2017-09-14 06:29 AM
82
cve
cve

CVE-2017-13054

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in...

9.8CVSS

9.3AI Score

0.009EPSS

2017-09-14 06:29 AM
84
cve
cve

CVE-2017-13051

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in...

9.8CVSS

9.3AI Score

0.009EPSS

2017-09-14 06:29 AM
99
cve
cve

CVE-2017-13053

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in...

9.8CVSS

9.3AI Score

0.009EPSS

2017-09-14 06:29 AM
95
cve
cve

CVE-2017-13046

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in...

9.8CVSS

9.3AI Score

0.009EPSS

2017-09-14 06:29 AM
88
cve
cve

CVE-2017-13028

The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in...

9.8CVSS

9.3AI Score

0.015EPSS

2017-09-14 06:29 AM
93
cve
cve

CVE-2017-13035

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in...

9.8CVSS

9.3AI Score

0.009EPSS

2017-09-14 06:29 AM
90
cve
cve

CVE-2017-13027

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in...

9.8CVSS

9.3AI Score

0.009EPSS

2017-09-14 06:29 AM
85
Total number of security vulnerabilities195