CVE-2019-15162

rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames...

CVE-2019-15165

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory...

PT-2019-9294 · Tcpdump +4 · Libpcap +5

Name of the Vulnerable Software and Affected Versions: tcpdump versions prior to 4.99.0 tcpdump versions prior to 4.9.3 Description: The issue is related to a buffer overflow in the command-line argument parser of tcpdump, specifically in the read infile function in tcpdump.c. This can be trigger...

CVE-2019-15161

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request...

CVE-2019-15164

rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source...

libpcap/fuzz_filter: Heap-buffer-overflow in find_dom

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed report: https://oss-fuzz.com/testcase?key=5715482721648640 Project: libpcap Fuzzer: afllibpcapfuzzfilter Fuzz target binary: fuzzfilter Job Type: aflasanlibpcap Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

libpcap/fuzz_filter: Heap-double-free in opt_cleanup

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed report: https://oss-fuzz.com/testcase?key=5641391398453248 Project: libpcap Fuzzer: afllibpcapfuzzfilter Fuzz target binary: fuzzfilter Job Type: aflasanlibpcap Platform Id: linux Crash Type: Heap-double-free Crash Address:...

Sniffglue - Secure Multithreaded Packet Sniffer

sniffglue is a network sniffer written in rust. Network packets are parsed concurrently using a thread pool to utilize all cpu cores. Project goals are that you can run sniffglue securely on untrusted networks and that it must not crash when processing packets. The output should be as useful as...

libpcap/fuzz_filter: Use-of-uninitialized-value in fuzz_filter.c

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed report: https://oss-fuzz.com/testcase?key=5735452293726208 Project: libpcap Fuzzer: libFuzzerlibpcapfuzzfilter Fuzz target binary: fuzzfilter Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value...

libpcap/fuzz_both: Use-of-uninitialized-value in fuzz_both.c

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed report: https://oss-fuzz.com/testcase?key=5674747897053184 Project: libpcap Fuzzer: libFuzzerlibpcapfuzzboth Fuzz target binary: fuzzboth Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

CUJO Smart Firewall mdnscap mDNS record parsing code execution vulnerability

Summary An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if an invalid query name is encountered, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated...

CUJO Smart Firewall mdnscap mDNS character-strings code execution vulnerability

Summary An exploitable heap overflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware 7003. The string lengths are handled incorrectly when parsing character strings in mDNS resource records, leading to arbitrary code execution in the context of the mdnscap...

PFQ - Functional Network Framework For Multi-Core Architectures

PFQ is a functional framework designed for the Linux operating system built for efficient packets capture/transmission 10G, 40G and beyond, in-kernel functional processing, kernel-bypass and packets steering across groups of sockets/end-points. It is highly optimized for multi-core architecture, ...

tcpdump < 4.9.3 - Multiple Heap-Based Out-of-Bounds Reads

Through fuzzing of network capture .pcap files, we have identified 16 crashes with unique stack traces in tcpdump. These crashes are caused by heap-based out-of-bounds memory reads, and can be reproduced with the latest tcpdump source code from GitHub, compiled with AddressSanitizer: --- cut --- ...

PF_RING - High-Speed Packet Capture, Filtering And Analysis

PFRING™ is a new type of network socket that dramatically improves the packet capture speed, and that’s characterized by the following properties: 1. Available for Linux kernels 2.6.32 and newer. 2. No need to patch the kernel: just load the kernel module. 3. 10 Gbit Hardware Packet Filtering usi...

libpcap/fuzz_both: Use-of-uninitialized-value in pcap_nametonetaddr

Detailed report: https://oss-fuzz.com/testcase?key=5754994205130752 Project: libpcap Fuzzer: libFuzzerlibpcapfuzzboth Fuzz target binary: fuzzboth Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pcapnametonetaddr genscode...

libpcap/fuzz_both: Use-of-uninitialized-value in pcap_filter_with_aux_data

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed report: https://oss-fuzz.com/testcase?key=5699403956879360 Project: libpcap Fuzzer: libFuzzerlibpcapfuzzboth Fuzz target binary: fuzzboth Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

libpcap/fuzz_filter: Use-of-uninitialized-value in pcap_nametonetaddr

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed report: https://oss-fuzz.com/testcase?key=5631616488046592 Project: libpcap Fuzzer: libFuzzerlibpcapfuzzfilter Fuzz target binary: fuzzfilter Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value...

Ettercap - A Comprehensive Suite For Man In The Middle Attacks

Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols and includes many features for network and host analysis. ETTERCAP...

PT-2018-3814

Name of the Vulnerable Software and Affected Versions libpcap versions prior to 1.9.1 Description The issue is related to the sf-pcapng.c component in the libpcap library, which does not properly validate the PHB header length before allocating memory. This allows a remote attacker to impact data...