6960 matches found
CVE-2016-7974
The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions...
CVE-2016-7925
The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:slifprint...
CVE-2016-7973
CVE-2016-7973 affects tcpdump up to version 4.9.0, where the AppleTalk parser (print-atalk.c) contains a buffer overflow vulnerability. An attacker could exploit the overly long AppleTalk argument to overflow a buffer and potentially execute arbitrary code or crash the application. The vulnerabil...
CVE-2017-5203
CVE-2017-5203 affects tcpdump: a buffer overflow in the BOOTP parser (print-bootp.c:bootp_print()) exists in tcpdump before 4.9.0. Several connected advisories confirm this family of issues and indicate the fix is to upgrade to tcpdump 4.9.0 or later. The CentOS advisory and Debian/Arch Linux sec...
CVE-2017-5483
tcpdump is vulnerable to CVE-2017-5483: a buffer overflow in the SNMP parser (print-snmp.c:asn1_parse()) could allow remote code execution. Affected: tcpdump before 4.9.0. Remediation: upgrade to tcpdump 4.9.0 or later (as noted in multiple advisories; upgrade is the advised fix).
CVE-2016-7935
The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint...
CVE-2016-7939
The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions...
CVE-2017-5202
The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnpprint...
CVE-2017-5486
The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnpprint...
CVE-2016-7923
The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arpprint...
CVE-2016-7984
The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftpprint...
CVE-2017-5341
The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otvprint...
CVE-2016-7922
The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ahprint...
CVE-2016-7935
The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint...
CVE-2016-7926
The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertypeprint...
CVE-2016-8574
The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15print...
CVE-2016-7934
tcpdump (CVE-2016-7934) has a buffer overflow in the RTCP parser (print-udp.c:rtcp_print()) that could allow a remote attacker to execute arbitrary code or crash the process. Affected versions are before 4.9.0. Remediation: upgrade tcpdump to version 4.9.0 or later; many advisories (CentOS, Debia...
CVE-2016-7924
tcpdump (before 4.9.0) is affected by CVE-2016-7924 due to a buffer overflow in the ATM parser: print-atm.c:oam_print(). An attacker may overflow a buffer by sending an overly long argument, potentially executing arbitrary code or crashing the application. Remediation per the documents is to upgr...
CVE-2016-7975
CVE-2016-7975 affects tcpdump: the TCP parser in print-tcp.c:tcp_print() can overflow a buffer in versions before 4.9.0, enabling a remote attacker to potentially execute code or cause a crash. Upstream fixes upgrade tcpdump to 4.9.0; other advisories (CentOS/RHEL, Debian, Arch Linux, IBM AIX/Clo...