CVE-2016-8575

The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933print, a different vulnerability than CVE-2017-5482...

CVE-2017-5485

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookupnsap...

CVE-2017-5202

tcpdump-4.9.0 fixes CVE-2017-5202: buffer overflow in ISO CLNS parser (print-isoclns.c:clnp_print()) that could allow remote code execution or crash. Affected: tcpdump before 4.9.0; exploit via overly long argument. Remediation: upgrade to tcpdump 4.9.0 or later per multiple advisories (CentOS, D...

CVE-2017-5485

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookupnsap...

CVE-2017-5484

The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sigprint...

CVE-2016-7986

CVE-2016-7986 affects the tcpdump utility (upstream before 4.9.0). The issue is a buffer overflow in the GeoNetworking parser implemented in print-geonet.c, which could allow a remote attacker to execute arbitrary code on a vulnerable host by crafting network traffic. The vulnerability is address...

CVE-2016-7986

The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions...

CVE-2016-7975

The TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-tcp.c:tcpprint...

CVE-2016-7974

CVE-2016-7974 : tcpdump before 4.9.0 is affected by a buffer overflow in the IP parser (print-ip.c). An attacker could send an overly long input to trigger the overflow, potentially executing arbitrary code or crashing tcpdump. The connected advisory details confirm this CVE is tied to tcpdump’s ...

CVE-2016-7974

The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions...

CVE-2016-8575

The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933print, a different vulnerability than CVE-2017-5482...

CVE-2016-8575

tcpdump contains a buffer overflow in the Q.933 parser (print-fr.c:q933_print) prior to version 4.9.0. An attacker could trigger this remotely by sending a crafted argument, potentially executing arbitrary code or causing a crash. The vulnerability is tracked as CVE-2016-8575 (and is part of a br...

CVE-2016-7923

The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arpprint...

CVE-2016-7926

CVE-2016-7926 affects tcpdump prior to 4.9.0, where the Ethernet parser in print-ether.c:ethertype_print() can overflow a buffer when handling overly long arguments, potentially enabling remote arbitrary code execution or a crash. Public docs (IBM AIX advisories, Debian/Arch Linux security entrie...

CVE-2016-7922

tcpdump vulnerability CVE-2016-7922 is due to a buffer overflow in the AH parser (print-ah.c:ah_print()) when handling an overly long argument. The issue is triggered in tcpdump versions before 4.9.0 and could allow a remote attacker to execute arbitrary code or crash the process. Multiple connec...

CVE-2016-7923

CVE-2016-7923 affects the ARP parser in tcpdump prior to 4.9.0, where a buffer overflow in print-arp.c:arp_print() can be triggered by an overly long argument sent to tcpdump, potentially allowing remote code execution or a crash. A fix is available in tcpdump 4.9.0 and later; upgrading to 4.9.0 ...

CVE-2016-7936

The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udpprint...

CVE-2016-7935

The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint...

CVE-2016-7928

The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcompprint...

CVE-2016-7930

CVE-2016-7930 affects tcpdump, specifically the LLC/SNAP parser in print-llc.c:llc_print(). A crafted network packet can trigger a buffer overflow, potentially allowing remote code execution or a crash. Remediation: upgrade tcpdump to version 4.9.0 or later; multiple advisories confirm this fix (...