CVE-2018-16300

The vulnerability CVE-2018-16300 affects tcpdump prior to version 4.9.3, where the BGP parser (print-bgp.c:bgp_attr_print) allows stack consumption due to unlimited recursion. Exploitation would cause a stack exhaustion condition. Remediation: upgrade tcpdump to 4.9.3 or newer (as reflected in th...

CVE-2018-16230

tcpdump's CVE-2018-16230 affects the BGP parser in tcpdump prior to version 4.9.3, caused by a buffer over-read in print-bgp.c:bgp_attr_print() for MP_REACH_NLRI. Impact is described as a potential crash/denial of service with high-severity CVSS vectors in multiple advisories. The publicly known ...

CVE-2018-16229

The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccpprintoption...

CVE-2018-16229

The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccpprintoption...

CVE-2018-16227

The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-80211.c for the Mesh Flags subfield...

CVE-2018-14882

CVE-2018-14882 affects tcpdump before 4.9.3, with a buffer over-read in the ICMPv6 parser (print-icmp6.c). This can cause a crash or, in some contexts, enable arbitrary code execution as part of the suite of tcpdump issues. The linked advisory (tcpdump updates 4.9.3) and Cloud Foundry USN note th...

CVE-2018-14882

The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c...

CVE-2018-14880

tcpdump has a confirmed vulnerability CVE-2018-14880 in the OSPFv3 parser: a buffer over-read in ospf6_print_lshdr() inside print-ospf6.c, affecting tcpdump before version 4.9.3. Connected advisories (e.g., AlmaLinux ALSA-2020:4760, Debian DSA-4547-1, DLA-1955-1) reference this CVE and span multi...

CVE-2018-14470

The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babelprintv2...

CVE-2018-14470

The CVE-2018-14470 issue affects tcpdump prior to 4.9.3, where the Babel parser in print-babel.c:babel_print_v2() triggers a buffer over-read. Public advisories and vendor bulletins (AlmaLinux, Debian, Cloud Foundry USN, IBM AIX) confirm this vulnerability as part of a collection of tcpdump issue...

CVE-2018-14470

The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babelprintv2...

CVE-2018-14469

CVE-2018-14469 affects tcpdump prior to 4.9.3. Root cause: buffer over-read in the IKEv1 parser (print-isakmp.c:ikev1_n_print()). Affected: tcpdump versions before 4.9.3. Impact stated in related advisories for tcpdump family includes potential crashes or instability; exploitation details are not...

CVE-2018-14469

The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1nprint...

CVE-2018-14469

The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1nprint...

CVE-2018-14468

The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfrprint...

CVE-2018-14468

The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfrprint...

CVE-2018-14467

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpcapabilitiesprint BGPCAPCODEMP...

CVE-2018-14467

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpcapabilitiesprint BGPCAPCODEMP...

CVE-2018-14466

The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rxcachefind and rxcacheinsert...

CVE-2018-14466

tcpdump (affected up to version 4.9.2) contains a buffer over-read in the Rx parser due to rx_cache_find() and rx_cache_insert() in print-rx.c, which is triggered by parsing RX data. The CVE is CVE-2018-14466. The vulnerability is fixed in tcpdump 4.9.3 (and related updates in downstream packages...