CVE-2024-8006 | Medium | 4.4 | 2024-08-31 | Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions t… |
CVE-2023-7256 | Medium | 4.4 | 2024-08-31 | In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo… |
CVE-2023-1801 | Medium | 6.5 | 2023-04-07 | The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet. |
CVE-2019-15167 | Critical | 9.1 | 2022-08-27 | The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463. |
CVE-2021-41043 | Medium | 5.5 | 2022-01-05 | Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact. |
CVE-2020-8037 | High | 7.5 | 2020-11-04 | The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory. |
CVE-2020-8036 | High | 7.5 | 2020-11-04 | The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way. |
CVE-2019-15165 | Medium | 5.3 | 2019-10-03 | sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory. |
CVE-2019-15164 | Medium | 5.3 | 2019-10-03 | rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source. |
CVE-2019-15163 | High | 7.5 | 2019-10-03 | rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daemon crash) if a crypt() call fails. |
CVE-2019-15162 | Medium | 5.3 | 2019-10-03 | rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to… |
CVE-2019-15161 | Medium | 5.3 | 2019-10-03 | rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data… |
CVE-2019-15166 | Low | 1.6 | 2019-10-03 | lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks. |
CVE-2018-16452 | High | 7.5 | 2019-10-03 | The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion. |
CVE-2018-16451 | High | 7.5 | 2019-10-03 | The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN. |
CVE-2018-16301 | High | 7.8 | 2019-10-03 | The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to… |
CVE-2018-16300 | High | 7.5 | 2019-10-03 | The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion. |
CVE-2018-16230 | High | 7.5 | 2019-10-03 | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI). |
CVE-2018-16229 | High | 7.5 | 2019-10-03 | The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option(). |
CVE-2018-16228 | High | 7.5 | 2019-10-03 | The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix(). |
CVE-2018-16227 | High | 7.5 | 2019-10-03 | The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield. |
CVE-2018-14882 | High | 7.5 | 2019-10-03 | The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c. |
CVE-2018-14881 | High | 7.5 | 2019-10-03 | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART). |
CVE-2018-14880 | High | 7.5 | 2019-10-03 | The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr(). |
CVE-2018-14879 | High | 7.0 | 2019-10-03 | The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file(). |
CVE-2018-14470 | High | 7.5 | 2019-10-03 | The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2(). |
CVE-2018-14469 | High | 7.5 | 2019-10-03 | The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print(). |
CVE-2018-14468 | High | 7.5 | 2019-10-03 | The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print(). |
CVE-2018-14467 | High | 7.5 | 2019-10-03 | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP). |
CVE-2018-14466 | High | 7.5 | 2019-10-03 | The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert(). |
CVE-2018-14465 | High | 7.5 | 2019-10-03 | The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
CVE-2018-14464 | High | 7.5 | 2019-10-03 | The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs(). |
CVE-2018-14463 | High | 7.5 | 2019-10-03 | The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167. |
CVE-2018-14462 | High | 7.5 | 2019-10-03 | The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print(). |
CVE-2018-14461 | High | 7.5 | 2019-10-03 | The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print(). |
CVE-2018-10105 | Critical | 9.8 | 2019-10-03 | tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2). |
CVE-2018-10103 | Critical | 9.8 | 2019-10-03 | tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2). |
CVE-2019-1010220 | Low | 3.3 | 2019-07-22 | tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component… |
CVE-2018-19519 | Medium | 5.5 | 2018-11-25 | In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization. |
CVE-2017-16808 | Medium | 5.5 | 2017-11-13 | tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c. |
CVE-2011-1935 | Critical | 9.8 | 2017-10-20 | pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attacke… |
CVE-2015-3138 | High | 7.5 | 2017-09-28 | print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash). |
CVE-2017-13725 | Critical | 9.8 | 2017-09-14 | The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print(). |
CVE-2017-13690 | Critical | 9.8 | 2017-09-14 | The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. |
CVE-2017-13689 | Critical | 9.8 | 2017-09-14 | The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print(). |
CVE-2017-13688 | Critical | 9.8 | 2017-09-14 | The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print(). |
CVE-2017-13687 | Critical | 9.8 | 2017-09-14 | The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print(). |
CVE-2017-13055 | Critical | 9.8 | 2017-09-14 | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv(). |
CVE-2017-13054 | Critical | 9.8 | 2017-09-14 | The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print(). |
CVE-2017-13053 | Critical | 9.8 | 2017-09-14 | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info(). |
CVE-2017-13052 | Critical | 9.8 | 2017-09-14 | The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print(). |
CVE-2017-13051 | Critical | 9.8 | 2017-09-14 | The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
CVE-2017-13050 | Critical | 9.8 | 2017-09-14 | The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print(). |
CVE-2017-13049 | Critical | 9.8 | 2017-09-14 | The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print(). |
CVE-2017-13048 | Critical | 9.8 | 2017-09-14 | The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
CVE-2017-13047 | Critical | 9.8 | 2017-09-14 | The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print(). |
CVE-2017-13046 | Critical | 9.8 | 2017-09-14 | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). |
CVE-2017-13045 | Critical | 9.8 | 2017-09-14 | The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print(). |
CVE-2017-13044 | Critical | 9.8 | 2017-09-14 | The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print(). |
CVE-2017-13043 | Critical | 9.8 | 2017-09-14 | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn(). |
CVE-2017-13042 | Critical | 9.8 | 2017-09-14 | The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print(). |
CVE-2017-13041 | Critical | 9.8 | 2017-09-14 | The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print(). |
CVE-2017-13040 | Critical | 9.8 | 2017-09-14 | The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions. |
CVE-2017-13039 | Critical | 9.8 | 2017-09-14 | The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. |
CVE-2017-13038 | Critical | 9.8 | 2017-09-14 | The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp(). |
CVE-2017-13037 | Critical | 9.8 | 2017-09-14 | The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts(). |
CVE-2017-13036 | Critical | 9.8 | 2017-09-14 | The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3(). |
CVE-2017-13035 | Critical | 9.8 | 2017-09-14 | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id(). |
CVE-2017-13034 | Critical | 9.8 | 2017-09-14 | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). |
CVE-2017-13033 | Critical | 9.8 | 2017-09-14 | The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print(). |
CVE-2017-13032 | Critical | 9.8 | 2017-09-14 | The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string(). |
CVE-2017-13031 | Critical | 9.8 | 2017-09-14 | The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print(). |
CVE-2017-13030 | Critical | 9.8 | 2017-09-14 | The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions. |
CVE-2017-13029 | Critical | 9.8 | 2017-09-14 | The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options(). |
CVE-2017-13028 | Critical | 9.8 | 2017-09-14 | The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print(). |
CVE-2017-13027 | Critical | 9.8 | 2017-09-14 | The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print(). |
CVE-2017-13026 | Critical | 9.8 | 2017-09-14 | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions. |
CVE-2017-13025 | Critical | 9.8 | 2017-09-14 | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). |
CVE-2017-13024 | Critical | 9.8 | 2017-09-14 | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). |
CVE-2017-13023 | Critical | 9.8 | 2017-09-14 | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). |
CVE-2017-13022 | Critical | 9.8 | 2017-09-14 | The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute(). |
CVE-2017-13021 | Critical | 9.8 | 2017-09-14 | The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print(). |
CVE-2017-13020 | Critical | 9.8 | 2017-09-14 | The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print(). |
CVE-2017-13019 | Critical | 9.8 | 2017-09-14 | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). |
CVE-2017-13018 | Critical | 9.8 | 2017-09-14 | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). |
CVE-2017-13017 | Critical | 9.8 | 2017-09-14 | The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print(). |
CVE-2017-13016 | Critical | 9.8 | 2017-09-14 | The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print(). |
CVE-2017-13015 | Critical | 9.8 | 2017-09-14 | The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print(). |
CVE-2017-13014 | Critical | 9.8 | 2017-09-14 | The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions. |
CVE-2017-13013 | Critical | 9.8 | 2017-09-14 | The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions. |
CVE-2017-13012 | Critical | 9.8 | 2017-09-14 | The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print(). |
CVE-2017-13011 | Critical | 9.8 | 2017-09-14 | Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal(). |
CVE-2017-13010 | Critical | 9.8 | 2017-09-14 | The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart(). |
CVE-2017-13009 | Critical | 9.8 | 2017-09-14 | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print(). |
CVE-2017-13008 | Critical | 9.8 | 2017-09-14 | The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements(). |
CVE-2017-13007 | Critical | 9.8 | 2017-09-14 | The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print(). |
CVE-2017-13006 | Critical | 9.8 | 2017-09-14 | The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions. |
CVE-2017-13005 | Critical | 9.8 | 2017-09-14 | The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter(). |
CVE-2017-13004 | Critical | 9.8 | 2017-09-14 | The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header(). |
CVE-2017-13003 | Critical | 9.8 | 2017-09-14 | The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print(). |