4221 matches found
CVE-2017-5341
The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otvprint...
CVE-2016-7928
The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcompprint...
CVE-2017-5205
tcpdump (before 4.9.0) contains a buffer overflow in the ISAKMP parser function print-isakmp.c:ikev2_e_print(), allowing a remote attacker to achieve arbitrary code execution by sending crafted network traffic. The entry CVE-2017-5205 is documented across multiple sources (e.g., Debian/ArchLinux ...
CVE-2016-7932
The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2checkchecksum...
CVE-2016-7922
tcpdump vulnerability CVE-2016-7922 is due to a buffer overflow in the AH parser (print-ah.c:ah_print()) when handling an overly long argument. The issue is triggered in tcpdump versions before 4.9.0 and could allow a remote attacker to execute arbitrary code or crash the process. Multiple connec...
CVE-2016-7986
The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions...
CVE-2017-5205
The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2eprint...
CVE-2016-7936
The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udpprint...
CVE-2016-7974
The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions...
CVE-2017-5342
In tcpdump before 4.9.0, a bug in multiple protocol parsers Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE could cause a buffer overflow in print-ether.c:etherprint...
CVE-2016-7975
The TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-tcp.c:tcpprint...
CVE-2016-7935
The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint...
CVE-2016-7933
CVE-2016-7933 affects tcpdump prior to 4.9.0. The PPP parser in print-ppp.c:ppp_hdlc_if_print() has a buffer overflow vulnerability due to improper bounds checking, allowing a remote attacker to overflow a buffer and potentially execute arbitrary code or crash tcpdump. Remediation: upgrade tcpdum...
CVE-2016-7937
CVE-2016-7937 affects tcpdump. The VAT parser in print-udp.c:vat_print() has a buffer overflow that could allow remote code execution or a crash when processing crafted input. Public advisories note the fix to tcpdump 4.9.0 (and related patches) across multiple distros (e.g., Debian, CentOS, Alpi...
CVE-2016-7925
CVE-2016-7925 affects the tcpdump SLIP parser. The vulnerability is a buffer overflow in print-sl.c:sl_if_print() that could be exploited remotely by sending crafted input, potentially allowing arbitrary code execution or a crash. The issue is fixed in upstream tcpdump 4.9.0 (as part of a broader...
CVE-2016-7983
tcpdump has CVE-2016-7983: a buffer overflow in the BOOTP parser (print-bootp.c:bootp_print()) could allow a remote attacker to overflow a buffer and execute arbitrary code or crash the running tcpdump. Affected versions are prior to 4.9.0; fixed in upstream as tcpdump 4.9.0 and referenced in mul...
CVE-2017-5202
tcpdump-4.9.0 fixes CVE-2017-5202: buffer overflow in ISO CLNS parser (print-isoclns.c:clnp_print()) that could allow remote code execution or crash. Affected: tcpdump before 4.9.0; exploit via overly long argument. Remediation: upgrade to tcpdump 4.9.0 or later per multiple advisories (CentOS, D...
CVE-2017-5485
The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookupnsap...
CVE-2016-7926
CVE-2016-7926 affects tcpdump prior to 4.9.0, where the Ethernet parser in print-ether.c:ethertype_print() can overflow a buffer when handling overly long arguments, potentially enabling remote arbitrary code execution or a crash. Public docs (IBM AIX advisories, Debian/Arch Linux security entrie...