CVE-2016-7938

The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...

CVE-2016-7939

tcpdump (CVE-2016-7939) is a buffer overflow in the GRE parser (print-gre.c) affecting tcpdump before version 4.9.0. Exploitation could allow remote code execution or crash. Multiple advisories reference upgrading to 4.9.0 as the fix (e.g., Apple, Debian/Canonical, Red Hat/CentOS). If you’re usin...

CVE-2016-7939

The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions...

CVE-2016-7938

CVE-2016-7938 affects tcpdump prior to 4.9.0, where the ZeroMQ parser contains an integer overflow in print-zeromq.c:zmtp1_print_frame(). The issue enables remote exploitation via crafted network traffic, with potential arbitrary code execution on the affected host. The vulnerability is addressed...

CVE-2016-7929

CVE-2016-7929 is a buffer overflow in the Juniper PPPoE ATM parser implemented in tcpdump’s print-juniper.c:juniper_parse_header(), affecting tcpdump prior to 4.9.0. The vulnerability can be exploited by crafting network packets to remote targets running tcpdump, potentially allowing arbitrary co...

CVE-2016-7993

CVE-2016-7993 affects tcpdump and stems from a bug in util-print.c:relts_print(), which can cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM) when handling overly long input. A remote attacker could potentially execute arbitrary code...

CVE-2016-7923

The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arpprint...

CVE-2016-7935

The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint...

CVE-2016-7939

The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions...

CVE-2016-7985

The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calmfastprint...

CVE-2017-5202

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnpprint...

CVE-2017-5486

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnpprint...

CVE-2016-7934

The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcpprint...

CVE-2016-7937

The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vatprint...

CVE-2017-5205

The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2eprint...

CVE-2016-7931

The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mplsprint...

CVE-2017-5203

The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootpprint...

CVE-2017-5202

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnpprint...

CVE-2017-5486

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnpprint...

CVE-2017-5482

tcpdump (affected up to version 4.9.0) has a buffer overflow in the Q.933 parser (print-fr.c:q933_print()) that could allow remote code execution or a crash. The CVE entry CVE-2017-5482 is tied to this issue, and connected advisories indicate upgrading tcpdump to 4.9.0 fixes the vulnerability. Ot...