CVE-2016-7983

The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootpprint...

CVE-2016-7984

The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftpprint...

CVE-2017-5342

In tcpdump before 4.9.0, a bug in multiple protocol parsers Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE could cause a buffer overflow in print-ether.c:etherprint...

CVE-2017-5202

tcpdump-4.9.0 fixes CVE-2017-5202: buffer overflow in ISO CLNS parser (print-isoclns.c:clnp_print()) that could allow remote code execution or crash. Affected: tcpdump before 4.9.0; exploit via overly long argument. Remediation: upgrade to tcpdump 4.9.0 or later per multiple advisories (CentOS, D...

CVE-2016-7974

CVE-2016-7974 : tcpdump before 4.9.0 is affected by a buffer overflow in the IP parser (print-ip.c). An attacker could send an overly long input to trigger the overflow, potentially executing arbitrary code or crashing tcpdump. The connected advisory details confirm this CVE is tied to tcpdump’s ...

CVE-2016-7928

The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcompprint...

CVE-2016-7926

CVE-2016-7926 affects tcpdump prior to 4.9.0, where the Ethernet parser in print-ether.c:ethertype_print() can overflow a buffer when handling overly long arguments, potentially enabling remote arbitrary code execution or a crash. Public docs (IBM AIX advisories, Debian/Arch Linux security entrie...

CVE-2016-7986

The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions...

CVE-2017-5342

In tcpdump before 4.9.0, a bug in multiple protocol parsers Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE could cause a buffer overflow in print-ether.c:etherprint...

CVE-2017-5341

The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otvprint...

CVE-2016-7932

The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2checkchecksum...

CVE-2016-7933

CVE-2016-7933 affects tcpdump prior to 4.9.0. The PPP parser in print-ppp.c:ppp_hdlc_if_print() has a buffer overflow vulnerability due to improper bounds checking, allowing a remote attacker to overflow a buffer and potentially execute arbitrary code or crash tcpdump. Remediation: upgrade tcpdum...

CVE-2016-7930

The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llcprint...

CVE-2016-7925

CVE-2016-7925 affects the tcpdump SLIP parser. The vulnerability is a buffer overflow in print-sl.c:sl_if_print() that could be exploited remotely by sending crafted input, potentially allowing arbitrary code execution or a crash. The issue is fixed in upstream tcpdump 4.9.0 (as part of a broader...

CVE-2016-7923

The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arpprint...

CVE-2016-7923

CVE-2016-7923 affects the ARP parser in tcpdump prior to 4.9.0, where a buffer overflow in print-arp.c:arp_print() can be triggered by an overly long argument sent to tcpdump, potentially allowing remote code execution or a crash. A fix is available in tcpdump 4.9.0 and later; upgrading to 4.9.0 ...

CVE-2016-7927

CVE-2016-7927 : tcpdump before 4.9.0 contains a buffer overflow in the IEEE 802.11 parser (print-802_11.c:ieee802_11_radio_print) that could allow a remote attacker to overflow a buffer and execute arbitrary code or cause a crash. Impact is consistent with other tcpdump parser vulnerabilities des...

CVE-2016-7930

CVE-2016-7930 affects tcpdump, specifically the LLC/SNAP parser in print-llc.c:llc_print(). A crafted network packet can trigger a buffer overflow, potentially allowing remote code execution or a crash. Remediation: upgrade tcpdump to version 4.9.0 or later; multiple advisories confirm this fix (...

CVE-2016-7935

The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint...

CVE-2016-7937

CVE-2016-7937 affects tcpdump. The VAT parser in print-udp.c:vat_print() has a buffer overflow that could allow remote code execution or a crash when processing crafted input. Public advisories note the fix to tcpdump 4.9.0 (and related patches) across multiple distros (e.g., Debian, CentOS, Alpi...