Lucene search
+L

3962 matches found

RedHat Linux
RedHat Linux
added 2020/11/04 1:47 a.m.7 views

tcpdump: SMB data printing mishandled

tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...

9.8CVSS6.3AI score0.03858EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/11/04 1:47 a.m.9 views

tcpdump: SMB data printing mishandled

tcpdump before 4.9.3 mishandles the printing of SMB data issue 1 of 2...

9.8CVSS6.3AI score0.04066EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2020/11/04 12:0 a.m.4 views

PT-2020-19934 · Tcpdump +9 · Tcpdump +9

Name of the Vulnerable Software and Affected Versions: tcpdump version 4.9.3 Description: The issue concerns the ppp decapsulator in tcpdump, which can be tricked into allocating a large amount of memory. There is no information provided about the estimated number of potentially affected devices...

9.8CVSS7.2AI score0.06816EPSS
SaveExploits4References229
Tenable Nessus
Tenable Nessus
added 2020/11/04 12:0 a.m.42 views

RHEL 8 : tcpdump (RHSA-2020:4760)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4760 advisory. The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet...

9.8CVSS7AI score0.06816EPSS
SaveExploits0References53
AlmaLinux
AlmaLinux
added 2020/11/03 12:33 p.m.111 views

Moderate: tcpdump security, bug fix, and enhancement update

The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces. The following packages have been upgraded to a later upstream version: tcpdump 4.9.3. BZ1804063...

7.5CVSS0.7AI score0.06816EPSS
SaveExploits0References24
Rockylinux
Rockylinux
added 2020/11/03 12:33 p.m.110 views

tcpdump security, bug fix, and enhancement update

An update is available for tcpdump. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tcpdump packages contain the tcpdump utility for monitoring network...

9.8CVSS8.3AI score0.06816EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/11/02 12:0 a.m.7 views

The vulnerability of the SMB protocol implementation in tools for intercepting and analyzing network traffic with tcpdump allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SMB protocol implementation for capturing and analyzing network traffic using tcpdump exists due to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

10CVSS6.3AI score0.03858EPSS
SaveExploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/11/02 12:0 a.m.11 views

The vulnerability of the icmp_print() function in the tcpdump utility for capturing and analyzing network traffic allows a hacker to induce a service failure.

The vulnerability of the icmpprint function print-icmp.c in the tcpdump tool for capturing and analyzing network traffic involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6.5AI score0.03985EPSS
SaveExploits0References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/11/02 12:0 a.m.8 views

The vulnerability of the ldp_tlv_print() function in the tcpdump utility for intercepting and analyzing network traffic allows a hacker to induce a service failure.

The vulnerability of the ldptlvprint function in the tcpdump network traffic capture and analysis utility is related to buffer-over-read operations in memory. Exploitation of this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6.3AI score0.03985EPSS
SaveExploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/11/02 12:0 a.m.10 views

The vulnerability of the lmp_print_data_link_subobjs() function in the tcpdump utility for capturing and analyzing network traffic allows a hacker to induce a service failure.

The vulnerability of the lmpprintdatalinksubobjs function print-lmp.c in the packet capture and analysis tool tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6.5AI score0.03985EPSS
SaveExploits0References15Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/11/02 12:0 a.m.9 views

The vulnerability of the vrrp_print() function in the tcpdump utility for capturing and analyzing network traffic allows a hacker to induce a service failure.

The vulnerability of the vrrpprint function in the print-vrrp.c utility for capturing and analyzing network traffic using tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6.5AI score0.04719EPSS
SaveExploits0References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/10/27 12:0 a.m.28 views

The vulnerability of the tcpdump tool for capturing and analyzing network traffic arises from buffer overflows, which allow attackers to disclose sensitive information that is protected by security measures.

The vulnerability of the tcpdump tool for capturing and analyzing network traffic arises due to buffer overflow. Exploiting this vulnerability can allow a hacker to disclose sensitive information using a specially created pcap file...

3.3CVSS6.5AI score0.01348EPSS
SaveExploits0References13Affected Software4
Kitploit
Kitploit
added 2020/10/22 11:30 a.m.16 views

NTLMRawUnHide - A Python3 Script Designed To Parse Network Packet Capture Files And Extract NTLMv2 Hashes In A Crackable Format

NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The tool was developed to extract NTLMv2 hashes from files generated by native Windows binaries like NETSH.EXE and PKTMON.EXE without conversion. The following bina...

7.3AI score
SaveExploits0References2
Hacker One
Hacker One
added 2020/08/22 6:9 a.m.34 views

Internet Bug Bounty: CVE-2017-13040 The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.

Description: Versions of tcpdump before 4.9.2 are vulnerable to a buffer over-read in print-mptcp.c. This vulnerability was disclosed to the tcpdump maintainers and was recently patched in version 4.9.2 and disclosed as CVE-2017-13040. Patch:...

7.5CVSS9.3AI score0.04598EPSS
SaveExploits0
Veracode
Veracode
added 2020/08/06 9:40 p.m.26 views

Denial Of Service (DoS)

tcpdump is vulnerable to denial of service DoS. The vulnerability exists as the BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgpattrprint because of unlimited recursion...

7.5CVSS4.2AI score0.04122EPSS
SaveExploits0References16Affected Software1
Veracode
Veracode
added 2020/08/06 9:37 p.m.25 views

Denial Of Service (DoS)

The LMP parser in tcpdump is vulnerable to denial of service DoS. A buffer over-read in print-lmp.c:lmpprintdatalinksubobjs allows an attacker to crash the application...

7.5CVSS4.7AI score0.03985EPSS
SaveExploits0References19Affected Software1
Veracode
Veracode
added 2020/08/06 9:37 p.m.27 views

Denial Of Service (DoS)

The ICMP parser in tcpdump is vulnerable to denial of service. A buffer over-read in print-icmp.c:icmpprint allows an attacker to crash the application...

7.5CVSS4.9AI score0.03985EPSS
SaveExploits0References19Affected Software1
Veracode
Veracode
added 2020/08/06 9:37 p.m.27 views

Denial Of Service (DoS)

tcpdump is vulnerable to denial of service DoS. The vulnerability exists as the VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint...

7.5CVSS3.5AI score0.04719EPSS
SaveExploits0References19Affected Software1
Veracode
Veracode
added 2020/08/06 9:37 p.m.37 views

Buffer Over-reads

tcpdump is vulnerable to a buffer over-read. The vulnerability exists due to a flaw in print-fr.c:mfrprint...

7.5CVSS2.3AI score0.03985EPSS
SaveExploits0References21Affected Software1
Veracode
Veracode
added 2020/08/06 9:37 p.m.27 views

Denial Of Service (DoS)

The IKEv1 parser in tcpdump is vulnerable to denial of service. A buffer over-read in print-isakmp.c:ikev1nprint allows an attacker to crash the application...

7.5CVSS4.7AI score0.05342EPSS
SaveExploits0References19Affected Software1
Rows per page
Query Builder