4221 matches found
CVE-2016-7975
The TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-tcp.c:tcpprint...
CVE-2016-7983
The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootpprint...
CVE-2016-7993
A bug in util-print.c:reltsprint in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM...
CVE-2016-8574
tcpdump CVE-2016-8574 affects the FRF.15 parser and is a buffer overflow in print-fr.c:frf15_print() that could allow remote code execution or crash. The vulnerability is addressed upstream by upgrading to tcpdump 4.9.0 (related advisories confirm fixes for 4.9.0 and later). The initial descripti...
CVE-2016-7940
CVE-2016-7940 affects tcpdump before 4.9.0, where the STP parser has a buffer overflow in print-stp.c/multiple functions. A crafted input could overflow a buffer and may allow arbitrary code execution or crash the application. The issue is addressed by upgrading tcpdump to version 4.9.0 or applyi...
CVE-2016-7924
tcpdump (before 4.9.0) is affected by CVE-2016-7924 due to a buffer overflow in the ATM parser: print-atm.c:oam_print(). An attacker may overflow a buffer by sending an overly long argument, potentially executing arbitrary code or crashing the application. Remediation per the documents is to upgr...
CVE-2017-5342
In tcpdump before 4.9.0, a bug in multiple protocol parsers Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE could cause a buffer overflow in print-ether.c:etherprint...
CVE-2016-7986
CVE-2016-7986 affects the tcpdump utility (upstream before 4.9.0). The issue is a buffer overflow in the GeoNetworking parser implemented in print-geonet.c, which could allow a remote attacker to execute arbitrary code on a vulnerable host by crafting network traffic. The vulnerability is address...
CVE-2016-7930
CVE-2016-7930 affects tcpdump, specifically the LLC/SNAP parser in print-llc.c:llc_print(). A crafted network packet can trigger a buffer overflow, potentially allowing remote code execution or a crash. Remediation: upgrade tcpdump to version 4.9.0 or later; multiple advisories confirm this fix (...
CVE-2017-5204
tcpdump (IPv6 parser) is affected by a buffer overflow in ip6_print() prior to version 4.9.0, allowing potential arbitrary code execution or crash via crafted input. The public details consistently reference CVE-2017-5204 and indicate the issue is mitigated by upgrading tcpdump to 4.9.0 or later....
CVE-2016-7932
The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2checkchecksum...
CVE-2016-7922
tcpdump vulnerability CVE-2016-7922 is due to a buffer overflow in the AH parser (print-ah.c:ah_print()) when handling an overly long argument. The issue is triggered in tcpdump versions before 4.9.0 and could allow a remote attacker to execute arbitrary code or crash the process. Multiple connec...
CVE-2017-5341
The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otvprint...
CVE-2016-7984
CVE-2016-7984 affects the tcpdump tool (pre-4.9.0) via a buffer overflow in the TFTP parser: print-tftp.c:tftp_print(). An overly long argument can overflow a buffer, enabling a remote attacker to potentially execute arbitrary code or crash tcpdump. The issue is addressed by upgrading tcpdump to ...
CVE-2016-7923
The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arpprint...
CVE-2016-7923
CVE-2016-7923 affects the ARP parser in tcpdump prior to 4.9.0, where a buffer overflow in print-arp.c:arp_print() can be triggered by an overly long argument sent to tcpdump, potentially allowing remote code execution or a crash. A fix is available in tcpdump 4.9.0 and later; upgrading to 4.9.0 ...
CVE-2016-7986
The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions...
CVE-2017-5205
The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2eprint...