Tcpdump vulnerabilities, page 2
181 vulnerabilities
Known vulnerabilities in Tcpdump products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
CVE-2018-14465alpinetcpdump+9
EPSS score4.07%
The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().CVE-2018-14462alpinetcpdump+9EPSS score3.98%
The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().CVE-2018-14881alpinetcpdump+8EPSS score4.76%
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).CVE-2018-10103alpinetcpdump+3EPSS score4.07%
tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).CVE-2018-10105alpinetcpdump+3EPSS score3.86%
tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2).CVE-2021-41043debiantcpslice+6EPSS score0.87%
Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.CVE-2015-2155debiantcpdump+6EPSS score7.81%
The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.CVE-2015-2154debiantcpdump+2EPSS score4.47%
The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.CVE-2015-2153debiantcpdump+2EPSS score19.03%
The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU).CVE-2015-0261debiantcpdump+2EPSS score6.84%
Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.CVE-2015-3138opensuse_projectleap+2EPSS score2.28%
print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).CVE-2007-1218debiantcpdump+1EPSS score2.92%
Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based.CVE-2007-3798applemac_os_x+7EPSS score70.39%
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.CVE-2016-7927alpinetcpdump+3EPSS score3.17%
The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print().CVE-2016-7986alpinetcpdump+3EPSS score3.17%
The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions.CVE-2016-7937alpinetcpdump+3EPSS score3.17%
The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print().CVE-2016-7925alpinetcpdump+3EPSS score3.17%
The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl_if_print().CVE-2016-7922alpinetcpdump+3EPSS score3.17%
The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print().CVE-2016-7923alpinetcpdump+3EPSS score3.36%
The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print().CVE-2016-7985alpinetcpdump+3EPSS score3.17%
The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calm_fast_print().