3979 matches found
CVE-2016-7933
The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppphdlcifprint...
CVE-2016-7924
tcpdump (before 4.9.0) is affected by CVE-2016-7924 due to a buffer overflow in the ATM parser: print-atm.c:oam_print(). An attacker may overflow a buffer by sending an overly long argument, potentially executing arbitrary code or crashing the application. Remediation per the documents is to upgr...
CVE-2016-7922
The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ahprint...
CVE-2016-7929
The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniperparseheader...
CVE-2017-5341
CVE-2017-5341 affects the tcpdump OTV parser. The vulnerability is a buffer overflow in print-otv.c:otv_print() present in tcpdump versions before 4.9.0. A remote attacker could craft packets to trigger the overflow, potentially crashing tcpdump or, in the worst case, executing arbitrary code on ...
CVE-2016-8574
tcpdump CVE-2016-8574 affects the FRF.15 parser and is a buffer overflow in print-fr.c:frf15_print() that could allow remote code execution or crash. The vulnerability is addressed upstream by upgrading to tcpdump 4.9.0 (related advisories confirm fixes for 4.9.0 and later). The initial descripti...
CVE-2016-7940
The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions...
CVE-2016-7936
CVE-2016-7936: tcpdump before 4.9.0 has a buffer overflow in the UDP parser (print-udp.c:udp_print). A crafted packet could overflow a buffer and allow arbitrary code execution or crash. Affected upstream fixed by upgrading to tcpdump 4.9.0; various advisories (CentOS, Debian, Alpine) reference t...
CVE-2016-7937
The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vatprint...
CVE-2016-7934
tcpdump (CVE-2016-7934) has a buffer overflow in the RTCP parser (print-udp.c:rtcp_print()) that could allow a remote attacker to execute arbitrary code or crash the process. Affected versions are before 4.9.0. Remediation: upgrade tcpdump to version 4.9.0 or later; many advisories (CentOS, Debia...
CVE-2016-7934
The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcpprint...
CVE-2016-7992
CVE-2016-7992 is a buffer overflow in the Classical IP over ATM parser of tcpdump prior to 4.9.0, caused by bounds-checking issues in print-cip.c:cip_if_print(). The vulnerability could allow a remote attacker to crash the application or execute arbitrary code. Public advisories/records consisten...
CVE-2017-5485
CVE-2017-5485 : tcpdump before 4.9.0 contains a buffer overflow in the ISO CLNS parser (addrtoname.c:lookup_nsap). The vulnerability allows remote attackers to potentially execute arbitrary code or crash the application by crafting overly long inputs. Public advisories confirm the issue as part o...
CVE-2016-7928
The CVE-2016-7928 entry concerns tcpdump prior to version 4.9.0, where the IPComp parser (print-ipcomp.c:ipcomp_print()) is vulnerable to a buffer overflow. The flaw allows a remote attacker to overflow a buffer by sending an overly long argument, potentially leading to arbitrary code execution o...
CVE-2016-7940
CVE-2016-7940 affects tcpdump before 4.9.0, where the STP parser has a buffer overflow in print-stp.c/multiple functions. A crafted input could overflow a buffer and may allow arbitrary code execution or crash the application. The issue is addressed by upgrading tcpdump to version 4.9.0 or applyi...
CVE-2016-7975
CVE-2016-7975 affects tcpdump: the TCP parser in print-tcp.c:tcp_print() can overflow a buffer in versions before 4.9.0, enabling a remote attacker to potentially execute code or cause a crash. Upstream fixes upgrade tcpdump to 4.9.0; other advisories (CentOS/RHEL, Debian, Arch Linux, IBM AIX/Clo...
CVE-2016-7924
The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oamprint...
CVE-2016-7985
The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calmfastprint...
