The Tcpdump Group

10 CVEs across 3 The Tcpdump Group products. Browse The Tcpdump Group vulnerabilities, severities, and proof-of-concept exploits.

The Tcpdump Group products with known CVEs

ProductCVEs
Tcpdump5
Libpcap4
Tcpslice1
The Tcpdump Group CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-11964Low1.92025-12-31On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf_16le…
CVE-2025-11961Low1.92025-12-31pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a wel…
CVE-2024-8006Medium4.42024-08-31Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions t…
CVE-2023-7256Medium4.42024-08-31In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo…
CVE-2024-2397Medium6.22024-04-12Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile. Th…
CVE-2023-1801Medium6.52023-04-07The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.
CVE-2021-41043Medium5.52022-01-05Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.
CVE-2020-8037High7.52020-11-04The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
CVE-2020-8036High7.52020-11-04The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.
CVE-2018-16301High7.82019-10-03The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to…