ALPINE-CVE-2018-14461

The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldptlvprint...

Design/Logic Flaw

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpcapabilitiesprint BGPCAPCODEMP...

Cross site request forgery (csrf)

The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgpattrprint because of unlimited recursion...

Design/Logic Flaw

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpattrprint MPREACHNLRI...

CVE-2018-16228

CVE-2018-16228 affects tcpdump prior to version 4.9.3. The HNCP parser (print-hncp.c:print_prefix) may read beyond the allocated buffer, exposing a buffer over-read vulnerability with potential impact on availability. The vulnerability is confirmed by multiple sources (e.g., tcpdump advisories an...

CVE-2018-14469

The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1nprint...

CVE-2018-14462

The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmpprint...

CVE-2018-14461

The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldptlvprint...

CVE-2018-10105

tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...

CVE-2018-10105

tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...

PT-2019-9294 · Tcpdump +4 · Libpcap +5

Name of the Vulnerable Software and Affected Versions: tcpdump versions prior to 4.99.0 tcpdump versions prior to 4.9.3 Description: The issue is related to a buffer overflow in the command-line argument parser of tcpdump, specifically in the read infile function in tcpdump.c. This can be trigger...

Design/Logic Flaw

An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSetTask.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The EmbeddedAceSetTask.cgi executable is used to change MSCII configuration values within the configuration manager of the AirLink ES450. Thi...

CVE-2018-4063

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an authenticat...

Remote code execution

An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an authenticat...

CVE-2018-4067

An exploitable information disclosure vulnerability exists in the ACEManager templateload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a information leak, resulting in the disclosure of internal paths and files. An attacker can make an...

CVE-2018-4067

CVE-2018-4067 is an information-disclosure vulnerability in the ACEManager template_load.cgi of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted authenticated HTTP request can cause a leak of internal file paths and files. The Red Hat and CNVD entries mirror the same description, and C...

CVE-2018-4063

CVE-2018-4063 affects Sierra Wireless AirLink ES450 FW 4.9.3. The vulnerability is in the ACEManager/upload.cgi functionality and allows an authenticated user to upload a file that results in executable code being uploaded to the webserver, enabling remote code execution. This is a unrestricted f...

CVE-2018-4066

An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause an authenticated user to perform privileged requests unknowingly, resulting in unauthenticated requests being...

Information disclosure

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to...

CVE-2018-4062

CVE-2018-4062 affects Sierra Wireless AirLink ES450 FW 4.9.3, in the SNMPD function. Activating SNMPD outside of the WebUI can trigger hard-coded credentials, exposing a privileged user. Public documents confirm this vulnerability and indicate the issue is part of a broader set of AirLink flaws (...