CVE-2016-7925

The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:slifprint...

CVE-2016-7993

A bug in util-print.c:reltsprint in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM...

CVE-2016-7927

CVE-2016-7927 : tcpdump before 4.9.0 contains a buffer overflow in the IEEE 802.11 parser (print-802_11.c:ieee802_11_radio_print) that could allow a remote attacker to overflow a buffer and execute arbitrary code or cause a crash. Impact is consistent with other tcpdump parser vulnerabilities des...

CVE-2017-5204

tcpdump (IPv6 parser) is affected by a buffer overflow in ip6_print() prior to version 4.9.0, allowing potential arbitrary code execution or crash via crafted input. The public details consistently reference CVE-2017-5204 and indicate the issue is mitigated by upgrading tcpdump to 4.9.0 or later....

CVE-2016-7929

CVE-2016-7929 is a buffer overflow in the Juniper PPPoE ATM parser implemented in tcpdump’s print-juniper.c:juniper_parse_header(), affecting tcpdump prior to 4.9.0. The vulnerability can be exploited by crafting network packets to remote targets running tcpdump, potentially allowing arbitrary co...

CVE-2017-5205

tcpdump (before 4.9.0) contains a buffer overflow in the ISAKMP parser function print-isakmp.c:ikev2_e_print(), allowing a remote attacker to achieve arbitrary code execution by sending crafted network traffic. The entry CVE-2017-5205 is documented across multiple sources (e.g., Debian/ArchLinux ...

CVE-2017-5341

CVE-2017-5341 affects the tcpdump OTV parser. The vulnerability is a buffer overflow in print-otv.c:otv_print() present in tcpdump versions before 4.9.0. A remote attacker could craft packets to trigger the overflow, potentially crashing tcpdump or, in the worst case, executing arbitrary code on ...

CVE-2016-7937

CVE-2016-7937 affects tcpdump. The VAT parser in print-udp.c:vat_print() has a buffer overflow that could allow remote code execution or a crash when processing crafted input. Public advisories note the fix to tcpdump 4.9.0 (and related patches) across multiple distros (e.g., Debian, CentOS, Alpi...

CVE-2017-5203

CVE-2017-5203 affects tcpdump: a buffer overflow in the BOOTP parser (print-bootp.c:bootp_print()) exists in tcpdump before 4.9.0. Several connected advisories confirm this family of issues and indicate the fix is to upgrade to tcpdump 4.9.0 or later. The CentOS advisory and Debian/Arch Linux sec...

CVE-2016-7933

CVE-2016-7933 affects tcpdump prior to 4.9.0. The PPP parser in print-ppp.c:ppp_hdlc_if_print() has a buffer overflow vulnerability due to improper bounds checking, allowing a remote attacker to overflow a buffer and potentially execute arbitrary code or crash tcpdump. Remediation: upgrade tcpdum...

CVE-2016-8575

tcpdump contains a buffer overflow in the Q.933 parser (print-fr.c:q933_print) prior to version 4.9.0. An attacker could trigger this remotely by sending a crafted argument, potentially executing arbitrary code or causing a crash. The vulnerability is tracked as CVE-2016-8575 (and is part of a br...

CVE-2016-7940

CVE-2016-7940 affects tcpdump before 4.9.0, where the STP parser has a buffer overflow in print-stp.c/multiple functions. A crafted input could overflow a buffer and may allow arbitrary code execution or crash the application. The issue is addressed by upgrading tcpdump to version 4.9.0 or applyi...

CVE-2016-7923

CVE-2016-7923 affects the ARP parser in tcpdump prior to 4.9.0, where a buffer overflow in print-arp.c:arp_print() can be triggered by an overly long argument sent to tcpdump, potentially allowing remote code execution or a crash. A fix is available in tcpdump 4.9.0 and later; upgrading to 4.9.0 ...

CVE-2016-7985

The CVE-2016-7985 entry concerns tcpdump’s CALM FAST parser. It specifies a buffer overflow in print-calm-fast.c:calm_fast_print() in tcpdump before 4.9.0. Public documents identify upstream fixes upgrading tcpdump to 4.9.0 as the remediation.

CVE-2016-7939

tcpdump (CVE-2016-7939) is a buffer overflow in the GRE parser (print-gre.c) affecting tcpdump before version 4.9.0. Exploitation could allow remote code execution or crash. Multiple advisories reference upgrading to 4.9.0 as the fix (e.g., Apple, Debian/Canonical, Red Hat/CentOS). If you’re usin...

CVE-2016-7973

CVE-2016-7973 affects tcpdump up to version 4.9.0, where the AppleTalk parser (print-atalk.c) contains a buffer overflow vulnerability. An attacker could exploit the overly long AppleTalk argument to overflow a buffer and potentially execute arbitrary code or crash the application. The vulnerabil...

CVE-2016-7984

CVE-2016-7984 affects the tcpdump tool (pre-4.9.0) via a buffer overflow in the TFTP parser: print-tftp.c:tftp_print(). An overly long argument can overflow a buffer, enabling a remote attacker to potentially execute arbitrary code or crash tcpdump. The issue is addressed by upgrading tcpdump to ...

CVE-2016-7926

CVE-2016-7926 affects tcpdump prior to 4.9.0, where the Ethernet parser in print-ether.c:ethertype_print() can overflow a buffer when handling overly long arguments, potentially enabling remote arbitrary code execution or a crash. Public docs (IBM AIX advisories, Debian/Arch Linux security entrie...

CVE-2017-5202

tcpdump-4.9.0 fixes CVE-2017-5202: buffer overflow in ISO CLNS parser (print-isoclns.c:clnp_print()) that could allow remote code execution or crash. Affected: tcpdump before 4.9.0; exploit via overly long argument. Remediation: upgrade to tcpdump 4.9.0 or later per multiple advisories (CentOS, D...

CVE-2017-5486

tcpdump before 4.9.0 is affected by a buffer overflow in the ISO CLNS parser (print-isoclns.c:clnp_print()), allowing remote attackers to craft packets that may execute arbitrary code or crash the program. This issue is detailed across multiple advisories (CVE-2017-5486; related CVEs such as 2016...