TC
Product
Tcpdump
172
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 133High 28Medium 3Low 1
Watch
Add Tcpdump to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-14467 | 7.5 | Oct 3 | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP) Affected: before 4.9.3 |
| CVE-2018-14466 | 7.5 | Oct 3 | The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert() Affected: before 4.9.3 |
| CVE-2018-14465 | 7.5 | Oct 3 | The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print() Affected: before 4.9.3; before 4.9.3 |
| CVE-2018-14464 | 7.5 | Oct 3 | The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs() Affected: before 4.9.3 |
| CVE-2018-14463 | 7.5 | Oct 3 | The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167 Affected: before 4.9.3; before 4.9.3 |
| CVE-2018-14462 | 7.5 | Oct 3 | The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print() Affected: before 4.9.3; before 4.9.3 |
| CVE-2018-14461 | 7.5 | Oct 3 | The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print() Affected: before 4.9.3 |
| CVE-2015-3138 | 7.5 | Sep 28 | print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash) Affected: through 4.7.3 |
| CVE-2017-12989 | 7.5 | Sep 14 | The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length() Affected: through 4.9.1 |
| CVE-2017-11108 | 7.5 | Jul 8 | tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data Affected: 4.9.0 |
| CVE-2018-14879 | 7.0 | Oct 3 | The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file() Affected: before 4.9.3 |
| CVE-2023-1801 | 6.5 | Apr 7 | The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet Affected: 4.99.3 |
| CVE-2018-19519 | 5.5 | Nov 25 | In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization Affected: 4.9.2 |
| CVE-2017-16808 | 5.5 | Nov 13 | tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c Affected: 4.9.2 |
| CVE-2019-1010220 | 3.3 | Jul 22 | tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read Affected: 4.9.2 |
| CVE-2015-2155 | – | Mar 24 | The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors Affected: through 4.7.0 |
| CVE-2015-2154 | – | Mar 24 | The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash)… Affected: through 4.7.0 |
| CVE-2015-2153 | – | Mar 24 | The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write… Affected: through 4.7.0 |
| CVE-2015-0261 | – | Mar 24 | Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service… Affected: through 4.7.0 |
| CVE-2007-1218 | – | Mar 2 | Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of… Affected: through 3.9.5 |
| CVE-2004-0183 | – | May 4 | TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an… Affected: through 3.8.1 |
| CVE-2004-0184 | – | May 4 | Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification… Affected: through 3.8.1 |