CVE-2017-5484

CVE-2017-5484 affects tcpdump prior to 4.9.0, specifically the ATM parser in print-atm.c:sig_print(). The vulnerability is a buffer overflow that could allow a remote attacker to execute arbitrary code or crash the application by sending overly long input. Affected software is tcpdump (pre-4.9.0)...

CVE-2016-7993

CVE-2016-7993 affects tcpdump and stems from a bug in util-print.c:relts_print(), which can cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM) when handling overly long input. A remote attacker could potentially execute arbitrary code...

CVE-2017-5486

tcpdump before 4.9.0 is affected by a buffer overflow in the ISO CLNS parser (print-isoclns.c:clnp_print()), allowing remote attackers to craft packets that may execute arbitrary code or crash the program. This issue is detailed across multiple advisories (CVE-2017-5486; related CVEs such as 2016...

CVE-2016-7925

The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:slifprint...

CVE-2017-5342

CVE-2017-5342 affects tcpdump prior to version 4.9.0. A bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print(). The entry explicitly notes a remote attack surface via crafted packets, consistent with the vulnerabi...

CVE-2016-7938

The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...

CVE-2016-7993

A bug in util-print.c:reltsprint in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM...

CVE-2016-7931

The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mplsprint...

CVE-2016-7973

The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions...

CVE-2016-7926

The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertypeprint...

CVE-2016-7984

The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftpprint...

CVE-2017-5482

The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933print, a different vulnerability than CVE-2016-8575...

CVE-2017-5204

The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6print...

CVE-2017-5483

The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...

CVE-2016-7927

The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-80211.c:ieee80211radioprint...

CVE-2016-7939

tcpdump (CVE-2016-7939) is a buffer overflow in the GRE parser (print-gre.c) affecting tcpdump before version 4.9.0. Exploitation could allow remote code execution or crash. Multiple advisories reference upgrading to 4.9.0 as the fix (e.g., Apple, Debian/Canonical, Red Hat/CentOS). If you’re usin...

CVE-2016-7932

CVE-2016-7932 affects tcpdump’s PIM parser. A buffer overflow in print-pim.c:pimv2_check_checksum() could allow a remote attacker to overflow a buffer and execute arbitrary code or crash tcpdump. Affected versions are tcpdump prior to 4.9.0. Remediation: upgrade tcpdump to version 4.9.0 or newer ...

CVE-2016-7929

CVE-2016-7929 is a buffer overflow in the Juniper PPPoE ATM parser implemented in tcpdump’s print-juniper.c:juniper_parse_header(), affecting tcpdump prior to 4.9.0. The vulnerability can be exploited by crafting network packets to remote targets running tcpdump, potentially allowing arbitrary co...

CVE-2017-5483

tcpdump is vulnerable to CVE-2017-5483: a buffer overflow in the SNMP parser (print-snmp.c:asn1_parse()) could allow remote code execution. Affected: tcpdump before 4.9.0. Remediation: upgrade to tcpdump 4.9.0 or later (as noted in multiple advisories; upgrade is the advised fix).

CVE-2016-7973

CVE-2016-7973 affects tcpdump up to version 4.9.0, where the AppleTalk parser (print-atalk.c) contains a buffer overflow vulnerability. An attacker could exploit the overly long AppleTalk argument to overflow a buffer and potentially execute arbitrary code or crash the application. The vulnerabil...