6960 matches found
CVE-2016-7984
CVE-2016-7984 affects the tcpdump tool (pre-4.9.0) via a buffer overflow in the TFTP parser: print-tftp.c:tftp_print(). An overly long argument can overflow a buffer, enabling a remote attacker to potentially execute arbitrary code or crash tcpdump. The issue is addressed by upgrading tcpdump to ...
CVE-2016-7932
The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2checkchecksum...
CVE-2016-7930
CVE-2016-7930 affects tcpdump, specifically the LLC/SNAP parser in print-llc.c:llc_print(). A crafted network packet can trigger a buffer overflow, potentially allowing remote code execution or a crash. Remediation: upgrade tcpdump to version 4.9.0 or later; multiple advisories confirm this fix (...
CVE-2016-7923
CVE-2016-7923 affects the ARP parser in tcpdump prior to 4.9.0, where a buffer overflow in print-arp.c:arp_print() can be triggered by an overly long argument sent to tcpdump, potentially allowing remote code execution or a crash. A fix is available in tcpdump 4.9.0 and later; upgrading to 4.9.0 ...
CVE-2016-7926
CVE-2016-7926 affects tcpdump prior to 4.9.0, where the Ethernet parser in print-ether.c:ethertype_print() can overflow a buffer when handling overly long arguments, potentially enabling remote arbitrary code execution or a crash. Public docs (IBM AIX advisories, Debian/Arch Linux security entrie...
CVE-2016-7986
CVE-2016-7986 affects the tcpdump utility (upstream before 4.9.0). The issue is a buffer overflow in the GeoNetworking parser implemented in print-geonet.c, which could allow a remote attacker to execute arbitrary code on a vulnerable host by crafting network traffic. The vulnerability is address...
CVE-2017-5341
The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otvprint...
CVE-2016-7974
The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions...
CVE-2016-7983
tcpdump has CVE-2016-7983: a buffer overflow in the BOOTP parser (print-bootp.c:bootp_print()) could allow a remote attacker to overflow a buffer and execute arbitrary code or crash the running tcpdump. Affected versions are prior to 4.9.0; fixed in upstream as tcpdump 4.9.0 and referenced in mul...
CVE-2017-5205
The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2eprint...
CVE-2016-7937
CVE-2016-7937 affects tcpdump. The VAT parser in print-udp.c:vat_print() has a buffer overflow that could allow remote code execution or a crash when processing crafted input. Public advisories note the fix to tcpdump 4.9.0 (and related patches) across multiple distros (e.g., Debian, CentOS, Alpi...
CVE-2016-7928
The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcompprint...
CVE-2016-8575
tcpdump contains a buffer overflow in the Q.933 parser (print-fr.c:q933_print) prior to version 4.9.0. An attacker could trigger this remotely by sending a crafted argument, potentially executing arbitrary code or causing a crash. The vulnerability is tracked as CVE-2016-8575 (and is part of a br...
CVE-2016-7929
The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniperparseheader...
CVE-2017-5483
The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...
CVE-2016-7933
The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppphdlcifprint...
CVE-2016-7939
The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions...
CVE-2016-7973
The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions...