tcpdump: Buffer over-read in print-icmp6.c

The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rxcachefind and rxcacheinsert...

PT-2020-8644

Name of the Vulnerable Software and Affected Versions: tcpdump versions 4.9.2 and earlier Description: The issue is related to a heap-based buffer over-read in the EXTRACT 32BITS function, which is called from the rx cache find function. This occurs due to improper sanitization of the serviceId...

tcpdump buffer overflow vulnerability (CNVD-2019-40789)

tcpdump is a set of sniffing tools from Tcpdump team running under command line. The tool is mainly used for packet analysis and network traffic capture etc. The 'rxcachefind' and 'rxcacheinsert' functions in the print-rx.c file of the Rx parser in versions of tcpdump prior to 4.9.3 have a buffer...