tcpdump security, bug fix, and enhancement update

An update is available for tcpdump. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tcpdump packages contain the tcpdump utility for monitoring network...

The vulnerability of the SMB protocol implementation in tools for intercepting and analyzing network traffic with tcpdump allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SMB protocol implementation for capturing and analyzing network traffic using tcpdump exists due to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the icmp_print() function in the tcpdump utility for capturing and analyzing network traffic allows a hacker to induce a service failure.

The vulnerability of the icmpprint function print-icmp.c in the tcpdump tool for capturing and analyzing network traffic involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the ldp_tlv_print() function in the tcpdump utility for intercepting and analyzing network traffic allows a hacker to induce a service failure.

The vulnerability of the ldptlvprint function in the tcpdump network traffic capture and analysis utility is related to buffer-over-read operations in memory. Exploitation of this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the vrrp_print() function in the tcpdump utility for capturing and analyzing network traffic allows a hacker to induce a service failure.

The vulnerability of the vrrpprint function in the print-vrrp.c utility for capturing and analyzing network traffic using tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the lmp_print_data_link_subobjs() function in the tcpdump utility for capturing and analyzing network traffic allows a hacker to induce a service failure.

The vulnerability of the lmpprintdatalinksubobjs function print-lmp.c in the packet capture and analysis tool tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the tcpdump tool for capturing and analyzing network traffic arises from buffer overflows, which allow attackers to disclose sensitive information that is protected by security measures.

The vulnerability of the tcpdump tool for capturing and analyzing network traffic arises due to buffer overflow. Exploiting this vulnerability can allow a hacker to disclose sensitive information using a specially created pcap file...

NTLMRawUnHide - A Python3 Script Designed To Parse Network Packet Capture Files And Extract NTLMv2 Hashes In A Crackable Format

NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The tool was developed to extract NTLMv2 hashes from files generated by native Windows binaries like NETSH.EXE and PKTMON.EXE without conversion. The following bina...

Internet Bug Bounty: CVE-2017-13040 The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.

Description: Versions of tcpdump before 4.9.2 are vulnerable to a buffer over-read in print-mptcp.c. This vulnerability was disclosed to the tcpdump maintainers and was recently patched in version 4.9.2 and disclosed as CVE-2017-13040. Patch:...

Denial Of Service (DoS)

tcpdump is vulnerable to denial of service DoS. The vulnerability exists as the BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgpattrprint because of unlimited recursion...

Denial Of Service (DoS)

The LMP parser in tcpdump is vulnerable to denial of service DoS. A buffer over-read in print-lmp.c:lmpprintdatalinksubobjs allows an attacker to crash the application...

Denial Of Service (DoS)

The ICMP parser in tcpdump is vulnerable to denial of service. A buffer over-read in print-icmp.c:icmpprint allows an attacker to crash the application...

Denial Of Service (DoS)

tcpdump is vulnerable to denial of service DoS. The vulnerability exists as the VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint...

Buffer Over-reads

tcpdump is vulnerable to a buffer over-read. The vulnerability exists due to a flaw in print-fr.c:mfrprint...

Denial Of Service (DoS)

tcpdump is vulnerable to denial of service DoS. The vulnerability exists as the Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rxcachefind and rxcacheinsert...

Denial Of Service (DoS)

The IKEv1 parser in tcpdump is vulnerable to denial of service. A buffer over-read in print-isakmp.c:ikev1nprint allows an attacker to crash the application...

Denial Of Service (DoS)

tcpdump is vulnerable to denial of service DoS. The vulnerability exists as the Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babelprintv2...

Buffer Over-read

tcpdump is vulnerable to Buffer Over-read. The LDP parser in tcpdump has a buffer over-read in print-ldp.c:ldptlvprint...

Denial Of Service (DoS)

tcpdump is vulnerable to denial of service DoS. The vulnerability exists as tcpdump before 4.9.3 has a heap-based buffer over-read related to aoeprint in print-aoe.c and lookupemem in addrtoname.c...

Denial Of Service (DoS)

tcpdump is vulnerable to denial of service DoS. The vulnerability exists as the IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-80211.c for the Mesh Flags subfield...