4550 matches found
CVE-2018-14461
The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldptlvprint...
CVE-2018-14461
CVE-2018-14461 affects tcpdump up to version 4.9.3, where the LDP parser has a buffer over-read in print-ldp.c:ldp_tlv_print(). The issue is triggered while parsing LDP TLVs and can read memory beyond bounds. The vulnerability is addressed by upgrading to tcpdump 4.9.3 and libpcap 1.9.1 (per mult...
CVE-2018-14461
The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldptlvprint...
CVE-2018-14461
The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldptlvprint...
CVE-2018-14461
The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldptlvprint...
CVE-2018-10105
tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...
CVE-2018-10105
CVE-2018-10105 affects the tcpdump utility. Affected: tcpdump before 4.9.3 with a flaw in printing SMB data, leading to potential memory impact (reported as high/critical in CVSS terms). Root cause: mishandling of SMB data during printing. Public details in connected sources (e.g., AlmaLinux ALSA...
CVE-2018-10105
tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...
CVE-2018-10105
tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...
CVE-2018-10105
tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...
CVE-2018-10103
tcpdump before 4.9.3 mishandles the printing of SMB data issue 1 of 2...
CVE-2018-10103
tcpdump before 4.9.3 mishandles the printing of SMB data issue 1 of 2...
CVE-2018-10103
tcpdump before 4.9.3 mishandles the printing of SMB data issue 1 of 2...
CVE-2018-10103
tcpdump before 4.9.3 is affected by CVE-2018-10103 (SMB data printing mishandling). The issue is fixed in tcpdump 4.9.3 and later; remediation is to upgrade to 4.9.3 or newer. Public advisories (Debian DSA-4547-1, DLA-1955-1) confirm the fix in 4.9.3-1~deb9u1/4.9.3-1~deb10u1; AlmaLinux advisory A...
CVE-2018-16301: Integer Overflow or Wraparound
The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:readinfile. To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump...
CVE-2018-14470: Out-of-bounds Read
The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babelprintv2...
CVE-2019-15166: Buffer Copy without Checking Size of Input
lmpprintdatalinksubobjs in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks...
CVE-2018-14464: Out-of-bounds Read
The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmpprintdatalinksubobjs...