8395 matches found
CVE-2016-7983
tcpdump has CVE-2016-7983: a buffer overflow in the BOOTP parser (print-bootp.c:bootp_print()) could allow a remote attacker to overflow a buffer and execute arbitrary code or crash the running tcpdump. Affected versions are prior to 4.9.0; fixed in upstream as tcpdump 4.9.0 and referenced in mul...
CVE-2016-7986
CVE-2016-7986 affects the tcpdump utility (upstream before 4.9.0). The issue is a buffer overflow in the GeoNetworking parser implemented in print-geonet.c, which could allow a remote attacker to execute arbitrary code on a vulnerable host by crafting network traffic. The vulnerability is address...
CVE-2017-5203
CVE-2017-5203 affects tcpdump: a buffer overflow in the BOOTP parser (print-bootp.c:bootp_print()) exists in tcpdump before 4.9.0. Several connected advisories confirm this family of issues and indicate the fix is to upgrade to tcpdump 4.9.0 or later. The CentOS advisory and Debian/Arch Linux sec...
CVE-2016-7934
tcpdump (CVE-2016-7934) has a buffer overflow in the RTCP parser (print-udp.c:rtcp_print()) that could allow a remote attacker to execute arbitrary code or crash the process. Affected versions are before 4.9.0. Remediation: upgrade tcpdump to version 4.9.0 or later; many advisories (CentOS, Debia...
CVE-2016-7925
CVE-2016-7925 affects the tcpdump SLIP parser. The vulnerability is a buffer overflow in print-sl.c:sl_if_print() that could be exploited remotely by sending crafted input, potentially allowing arbitrary code execution or a crash. The issue is fixed in upstream tcpdump 4.9.0 (as part of a broader...
CVE-2016-7925
The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:slifprint...
CVE-2016-7933
The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppphdlcifprint...
CVE-2016-7937
The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vatprint...
CVE-2017-5483
tcpdump is vulnerable to CVE-2017-5483: a buffer overflow in the SNMP parser (print-snmp.c:asn1_parse()) could allow remote code execution. Affected: tcpdump before 4.9.0. Remediation: upgrade to tcpdump 4.9.0 or later (as noted in multiple advisories; upgrade is the advised fix).
CVE-2016-7929
The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniperparseheader...
CVE-2017-5483
The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...
CVE-2016-7925
The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:slifprint...
CVE-2017-5486
The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnpprint...
CVE-2017-5482
The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933print, a different vulnerability than CVE-2016-8575...
CVE-2016-7973
CVE-2016-7973 affects tcpdump up to version 4.9.0, where the AppleTalk parser (print-atalk.c) contains a buffer overflow vulnerability. An attacker could exploit the overly long AppleTalk argument to overflow a buffer and potentially execute arbitrary code or crash the application. The vulnerabil...
CVE-2017-5341
The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otvprint...
CVE-2016-7932
The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2checkchecksum...
CVE-2016-7992
The Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-cip.c:cipifprint...