Tcpdump vulnerabilities, page 4

181 vulnerabilities

Known vulnerabilities in Tcpdump products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.

9.8CVE-2016-7936alpinetcpdump+3
EPSS score
3.17%
The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_print().
9.8CVE-2016-8574alpinetcpdump+3
EPSS score
3.17%
The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15_print().
9.8CVE-2016-8575alpinetcpdump+3
EPSS score
5.50%
The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2017-5482.
7.5CVE-2020-8036ubuntutcpdump+2
EPSS score
1.48%
The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.
7.5CVE-2020-8037alpinetcpdump+16
EPSS score
3.11%
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
9.8CVE-2011-1935debianlibpcap+1
EPSS score
3.65%
pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding detection via crafted packets.
5.5CVE-2017-16808alpinetcpdump+3
EPSS score
3.17%
tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.
9.8CVE-2017-13040debiantcpdump+2
EPSS score
4.60%
The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.
9.8CVE-2017-13019debiantcpdump+2
EPSS score
4.49%
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
9.8CVE-2017-13043debiantcpdump+2
EPSS score
3.24%
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().
9.8CVE-2017-13032debiantcpdump+2
EPSS score
3.24%
The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().
9.8CVE-2017-13009debiantcpdump+2
EPSS score
3.35%
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().
9.8CVE-2017-13049debiantcpdump+2
EPSS score
3.43%
The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().
9.8CVE-2017-13042debiantcpdump+2
EPSS score
3.24%
The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().
9.8CVE-2017-13016debiantcpdump+2
EPSS score
2.53%
The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().
9.8CVE-2017-13026debiantcpdump+2
EPSS score
3.24%
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.
9.8CVE-2017-13039debiantcpdump+2
EPSS score
3.43%
The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.
9.8CVE-2017-13008debiantcpdump+2
EPSS score
3.35%
The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
9.8CVE-2017-13025debiantcpdump+2
EPSS score
3.43%
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().
9.8CVE-2017-13035debiantcpdump+2
EPSS score
3.43%
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().