CVE-2017-5202

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnpprint...

CVE-2016-8574

The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15print...

CVE-2016-7992

CVE-2016-7992 is a buffer overflow in the Classical IP over ATM parser of tcpdump prior to 4.9.0, caused by bounds-checking issues in print-cip.c:cip_if_print(). The vulnerability could allow a remote attacker to crash the application or execute arbitrary code. Public advisories/records consisten...

CVE-2016-7940

The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions...

CVE-2016-7985

The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calmfastprint...

CVE-2016-7934

tcpdump (CVE-2016-7934) has a buffer overflow in the RTCP parser (print-udp.c:rtcp_print()) that could allow a remote attacker to execute arbitrary code or crash the process. Affected versions are before 4.9.0. Remediation: upgrade tcpdump to version 4.9.0 or later; many advisories (CentOS, Debia...

CVE-2016-7929

The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniperparseheader...

CVE-2017-5202

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnpprint...

CVE-2017-5203

The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootpprint...

CVE-2017-5485

CVE-2017-5485 : tcpdump before 4.9.0 contains a buffer overflow in the ISO CLNS parser (addrtoname.c:lookup_nsap). The vulnerability allows remote attackers to potentially execute arbitrary code or crash the application by crafting overly long inputs. Public advisories confirm the issue as part o...

CVE-2016-7924

tcpdump (before 4.9.0) is affected by CVE-2016-7924 due to a buffer overflow in the ATM parser: print-atm.c:oam_print(). An attacker may overflow a buffer by sending an overly long argument, potentially executing arbitrary code or crashing the application. Remediation per the documents is to upgr...

CVE-2016-7928

The CVE-2016-7928 entry concerns tcpdump prior to version 4.9.0, where the IPComp parser (print-ipcomp.c:ipcomp_print()) is vulnerable to a buffer overflow. The flaw allows a remote attacker to overflow a buffer by sending an overly long argument, potentially leading to arbitrary code execution o...

CVE-2016-7975

CVE-2016-7975 affects tcpdump: the TCP parser in print-tcp.c:tcp_print() can overflow a buffer in versions before 4.9.0, enabling a remote attacker to potentially execute code or cause a crash. Upstream fixes upgrade tcpdump to 4.9.0; other advisories (CentOS/RHEL, Debian, Arch Linux, IBM AIX/Clo...

CVE-2016-7934

The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcpprint...

CVE-2016-7922

The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ahprint...

CVE-2017-5486

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnpprint...

CVE-2016-7924

The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oamprint...

CVE-2017-5341

CVE-2017-5341 affects the tcpdump OTV parser. The vulnerability is a buffer overflow in print-otv.c:otv_print() present in tcpdump versions before 4.9.0. A remote attacker could craft packets to trigger the overflow, potentially crashing tcpdump or, in the worst case, executing arbitrary code on ...

CVE-2016-8574

tcpdump CVE-2016-8574 affects the FRF.15 parser and is a buffer overflow in print-fr.c:frf15_print() that could allow remote code execution or crash. The vulnerability is addressed upstream by upgrading to tcpdump 4.9.0 (related advisories confirm fixes for 4.9.0 and later). The initial descripti...

CVE-2016-7940

CVE-2016-7940 affects tcpdump before 4.9.0, where the STP parser has a buffer overflow in print-stp.c/multiple functions. A crafted input could overflow a buffer and may allow arbitrary code execution or crash the application. The issue is addressed by upgrading tcpdump to version 4.9.0 or applyi...