DEBIAN-CVE-2016-7986

The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions...

DEBIAN-CVE-2016-7931

The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mplsprint...

CVE-2016-7940

CVE-2016-7940 affects tcpdump before 4.9.0, where the STP parser has a buffer overflow in print-stp.c/multiple functions. A crafted input could overflow a buffer and may allow arbitrary code execution or crash the application. The issue is addressed by upgrading tcpdump to version 4.9.0 or applyi...

CVE-2016-7928

The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcompprint...

CVE-2016-7928

The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcompprint...

CVE-2017-5205

The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2eprint...

CVE-2017-5341

The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otvprint...

CVE-2016-7924

The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oamprint...

CVE-2016-7925

The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:slifprint...

CVE-2016-7932

The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2checkchecksum...

CVE-2016-7937

The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vatprint...

CVE-2017-5203

CVE-2017-5203 affects tcpdump: a buffer overflow in the BOOTP parser (print-bootp.c:bootp_print()) exists in tcpdump before 4.9.0. Several connected advisories confirm this family of issues and indicate the fix is to upgrade to tcpdump 4.9.0 or later. The CentOS advisory and Debian/Arch Linux sec...

CVE-2017-5341

CVE-2017-5341 affects the tcpdump OTV parser. The vulnerability is a buffer overflow in print-otv.c:otv_print() present in tcpdump versions before 4.9.0. A remote attacker could craft packets to trigger the overflow, potentially crashing tcpdump or, in the worst case, executing arbitrary code on ...

CVE-2017-5483

tcpdump is vulnerable to CVE-2017-5483: a buffer overflow in the SNMP parser (print-snmp.c:asn1_parse()) could allow remote code execution. Affected: tcpdump before 4.9.0. Remediation: upgrade to tcpdump 4.9.0 or later (as noted in multiple advisories; upgrade is the advised fix).

CVE-2016-7924

tcpdump (before 4.9.0) is affected by CVE-2016-7924 due to a buffer overflow in the ATM parser: print-atm.c:oam_print(). An attacker may overflow a buffer by sending an overly long argument, potentially executing arbitrary code or crashing the application. Remediation per the documents is to upgr...

CVE-2016-7926

CVE-2016-7926 affects tcpdump prior to 4.9.0, where the Ethernet parser in print-ether.c:ethertype_print() can overflow a buffer when handling overly long arguments, potentially enabling remote arbitrary code execution or a crash. Public docs (IBM AIX advisories, Debian/Arch Linux security entrie...

CVE-2016-7930

CVE-2016-7930 affects tcpdump, specifically the LLC/SNAP parser in print-llc.c:llc_print(). A crafted network packet can trigger a buffer overflow, potentially allowing remote code execution or a crash. Remediation: upgrade tcpdump to version 4.9.0 or later; multiple advisories confirm this fix (...

CVE-2016-7934

tcpdump (CVE-2016-7934) has a buffer overflow in the RTCP parser (print-udp.c:rtcp_print()) that could allow a remote attacker to execute arbitrary code or crash the process. Affected versions are before 4.9.0. Remediation: upgrade tcpdump to version 4.9.0 or later; many advisories (CentOS, Debia...

CVE-2016-7936

CVE-2016-7936: tcpdump before 4.9.0 has a buffer overflow in the UDP parser (print-udp.c:udp_print). A crafted packet could overflow a buffer and allow arbitrary code execution or crash. Affected upstream fixed by upgrading to tcpdump 4.9.0; various advisories (CentOS, Debian, Alpine) reference t...

CVE-2016-7937

CVE-2016-7937 affects tcpdump. The VAT parser in print-udp.c:vat_print() has a buffer overflow that could allow remote code execution or a crash when processing crafted input. Public advisories note the fix to tcpdump 4.9.0 (and related patches) across multiple distros (e.g., Debian, CentOS, Alpi...