tcpdump vulnerabilities and fixes

Recent CVEs affecting tcpdump, with upgrade or downgrade steps. 194 tracked.

tcpdump has 194 tracked vulnerabilities, 133 critical. A fixed release or vendor patch exists for 171. Most recent: 2023-04-07. Highest priority: CVE-2007-3798 (score 77/100).

• CVE-2018-16301 HIGH 7.8 UPGRADE The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile()
• CVE-1999-1024 HIGH 7.5 DOWNGRADE ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a ze
• CVE-2000-1026 HIGH 10.0 DOWNGRADE Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.
• CVE-2023-1801 MEDIUM 6.5 DOWNGRADE The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted
• CVE-2020-8037 HIGH 7.5 DOWNGRADE MITIGATE The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
• CVE-2020-8036 HIGH 7.5 DOWNGRADE The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.
• CVE-2019-15167 CRITICAL 9.1 UPGRADE The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3
• CVE-2019-15166 LOW 1.6 UPGRADE UPGRADE lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
• CVE-2019-1010220 LOW 3.3 DOWNGRADE tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read
• CVE-2018-19519 MEDIUM 5.5 DOWNGRADE In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via craft
• CVE-2018-16452 HIGH 7.5 UPGRADE The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.
• CVE-2018-16451 HIGH 7.5 UPGRADE UPGRADE The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE
• CVE-2018-16300 HIGH 7.5 UPGRADE The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unl
• CVE-2018-16230 HIGH 7.5 UPGRADE UPGRADE The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).
• CVE-2018-16229 HIGH 7.5 UPGRADE UPGRADE The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().
• CVE-2018-16228 HIGH 7.5 UPGRADE UPGRADE The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().
• CVE-2018-16227 HIGH 7.5 UPGRADE UPGRADE The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags sub
• CVE-2018-14882 HIGH 7.5 UPGRADE UPGRADE The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.
• CVE-2018-14881 HIGH 7.5 UPGRADE UPGRADE The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAP
• CVE-2018-14880 HIGH 7.5 UPGRADE UPGRADE The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
• CVE-2018-14879 HIGH 7.0 UPGRADE UPGRADE The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
• CVE-2018-14470 HIGH 7.5 UPGRADE UPGRADE The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().
• CVE-2018-14469 HIGH 7.5 UPGRADE UPGRADE The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
• CVE-2018-14468 HIGH 7.5 UPGRADE UPGRADE The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
• CVE-2018-14467 HIGH 7.5 UPGRADE UPGRADE The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAP
• CVE-2018-14466 HIGH 7.5 UPGRADE UPGRADE The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert
• CVE-2018-14465 HIGH 7.5 UPGRADE UPGRADE The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
• CVE-2018-14464 HIGH 7.5 UPGRADE UPGRADE The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().
• CVE-2018-14463 HIGH 7.5 UPGRADE UPGRADE The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2
• CVE-2018-14462 HIGH 7.5 UPGRADE UPGRADE The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
• CVE-2018-14461 HIGH 7.5 UPGRADE UPGRADE The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().
• CVE-2018-10105 CRITICAL 9.8 UPGRADE tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2).
• CVE-2018-10103 CRITICAL 9.8 UPGRADE tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).
• CVE-2017-5486 CRITICAL 9.8 UPGRADE The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().
• CVE-2017-5485 CRITICAL 9.8 UPGRADE The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap().
• CVE-2017-5484 CRITICAL 9.8 UPGRADE The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print().
• CVE-2017-5483 CRITICAL 9.8 UPGRADE The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse().
• CVE-2017-5482 CRITICAL 9.8 UPGRADE The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnera
• CVE-2017-5342 CRITICAL 9.8 UPGRADE In tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could
• CVE-2017-5341 CRITICAL 9.8 UPGRADE The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print().
• CVE-2017-5205 CRITICAL 9.8 UPGRADE MITIGATE The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print().
• CVE-2017-5204 CRITICAL 9.8 UPGRADE MITIGATE The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print().
• CVE-2017-5203 CRITICAL 9.8 UPGRADE MITIGATE The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().
• CVE-2017-5202 CRITICAL 9.8 UPGRADE MITIGATE The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().
• CVE-2017-16808 MEDIUM 5.5 DOWNGRADE tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in
• CVE-2017-13725 CRITICAL 9.8 UPGRADE MITIGATE The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().
• CVE-2017-13690 CRITICAL 9.8 UPGRADE The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.
• CVE-2017-13689 CRITICAL 9.8 UPGRADE The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().
• CVE-2017-13688 CRITICAL 9.8 UPGRADE The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().
• CVE-2017-13687 CRITICAL 9.8 UPGRADE MITIGATE The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().
• CVE-2017-13055 CRITICAL 9.8 UPGRADE The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_sub
• CVE-2017-13054 CRITICAL 9.8 UPGRADE The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().
• CVE-2017-13053 CRITICAL 9.8 UPGRADE The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().
• CVE-2017-13052 CRITICAL 9.8 UPGRADE The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().
• CVE-2017-13051 CRITICAL 9.8 UPGRADE The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
• CVE-2017-13050 CRITICAL 9.8 UPGRADE The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print()
• CVE-2017-13049 CRITICAL 9.8 UPGRADE The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().
• CVE-2017-13048 CRITICAL 9.8 UPGRADE The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
• CVE-2017-13047 CRITICAL 9.8 UPGRADE The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().
• CVE-2017-13046 CRITICAL 9.8 UPGRADE The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
• CVE-2017-13045 CRITICAL 9.8 UPGRADE The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().
• CVE-2017-13044 CRITICAL 9.8 UPGRADE The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().
• CVE-2017-13043 CRITICAL 9.8 UPGRADE The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().
• CVE-2017-13042 CRITICAL 9.8 UPGRADE The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().
• CVE-2017-13041 CRITICAL 9.8 UPGRADE The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().
• CVE-2017-13040 CRITICAL 9.8 UPGRADE The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.
• CVE-2017-13039 CRITICAL 9.8 UPGRADE The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.
• CVE-2017-13038 CRITICAL 9.8 UPGRADE The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().
• CVE-2017-13037 CRITICAL 9.8 UPGRADE The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().
• CVE-2017-13036 CRITICAL 9.8 UPGRADE The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().
• CVE-2017-13035 CRITICAL 9.8 UPGRADE The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().
• CVE-2017-13034 CRITICAL 9.8 UPGRADE The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
• CVE-2017-13033 CRITICAL 9.8 UPGRADE The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().
• CVE-2017-13032 CRITICAL 9.8 UPGRADE The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().
• CVE-2017-13031 CRITICAL 9.8 UPGRADE The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_pri
• CVE-2017-13030 CRITICAL 9.8 UPGRADE The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.
• CVE-2017-13029 CRITICAL 9.8 UPGRADE The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().
• CVE-2017-13028 CRITICAL 9.8 UPGRADE MITIGATE The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().
• CVE-2017-13027 CRITICAL 9.8 UPGRADE The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().
• CVE-2017-13026 CRITICAL 9.8 UPGRADE The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.
• CVE-2017-13025 CRITICAL 9.8 UPGRADE The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print
• CVE-2017-13024 CRITICAL 9.8 UPGRADE MITIGATE The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print
• CVE-2017-13023 CRITICAL 9.8 UPGRADE The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print
• CVE-2017-13022 CRITICAL 9.8 UPGRADE The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().
• CVE-2017-13021 CRITICAL 9.8 UPGRADE The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().
• CVE-2017-13020 CRITICAL 9.8 UPGRADE MITIGATE The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().
• CVE-2017-13019 CRITICAL 9.8 UPGRADE The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
• CVE-2017-13018 CRITICAL 9.8 UPGRADE The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
• CVE-2017-13017 CRITICAL 9.8 UPGRADE The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().
• CVE-2017-13016 CRITICAL 9.8 UPGRADE The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().
• CVE-2017-13015 CRITICAL 9.8 UPGRADE The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().
• CVE-2017-13014 CRITICAL 9.8 UPGRADE The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), severa
• CVE-2017-13013 CRITICAL 9.8 UPGRADE The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.
• CVE-2017-13012 CRITICAL 9.8 UPGRADE The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().
• CVE-2017-13011 CRITICAL 9.8 UPGRADE Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_inte
• CVE-2017-13010 CRITICAL 9.8 UPGRADE The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().
• CVE-2017-13009 CRITICAL 9.8 UPGRADE The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().
• CVE-2017-13008 CRITICAL 9.8 UPGRADE The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
• CVE-2017-13007 CRITICAL 9.8 UPGRADE The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().
• CVE-2017-13006 CRITICAL 9.8 UPGRADE The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.
• CVE-2017-13005 CRITICAL 9.8 UPGRADE The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().
• CVE-2017-13004 CRITICAL 9.8 UPGRADE MITIGATE The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_h
• CVE-2017-13003 CRITICAL 9.8 UPGRADE The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().
• CVE-2017-13002 CRITICAL 9.8 UPGRADE The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().
• CVE-2017-13001 CRITICAL 9.8 UPGRADE The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().
• CVE-2017-13000 CRITICAL 9.8 UPGRADE The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_pr
• CVE-2017-12999 CRITICAL 9.8 UPGRADE The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().
• CVE-2017-12998 CRITICAL 9.8 UPGRADE The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().
• CVE-2017-12997 CRITICAL 9.8 UPGRADE The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private
• CVE-2017-12996 CRITICAL 9.8 UPGRADE The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().
• CVE-2017-12995 CRITICAL 9.8 UPGRADE The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().
• CVE-2017-12994 CRITICAL 9.8 UPGRADE The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
• CVE-2017-12993 CRITICAL 9.8 UPGRADE The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functi
• CVE-2017-12992 CRITICAL 9.8 UPGRADE The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().
• CVE-2017-12991 CRITICAL 9.8 UPGRADE The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
• CVE-2017-12990 CRITICAL 9.8 UPGRADE The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several
• CVE-2017-12989 HIGH 7.5 UPGRADE The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_len
• CVE-2017-12988 CRITICAL 9.8 UPGRADE The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().
• CVE-2017-12987 CRITICAL 9.8 UPGRADE MITIGATE The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
• CVE-2017-12986 CRITICAL 9.8 UPGRADE The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().
• CVE-2017-12985 CRITICAL 9.8 UPGRADE The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().
• CVE-2017-12902 CRITICAL 9.8 UPGRADE MITIGATE The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.
• CVE-2017-12901 CRITICAL 9.8 UPGRADE The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().
• CVE-2017-12900 CRITICAL 9.8 UPGRADE Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().
• CVE-2017-12899 CRITICAL 9.8 UPGRADE MITIGATE The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().
• CVE-2017-12898 CRITICAL 9.8 UPGRADE The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().
• CVE-2017-12897 CRITICAL 9.8 UPGRADE The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().
• CVE-2017-12896 CRITICAL 9.8 UPGRADE MITIGATE The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().
• CVE-2017-12895 CRITICAL 9.8 UPGRADE The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().
• CVE-2017-12894 CRITICAL 9.8 UPGRADE Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestr
• CVE-2017-12893 CRITICAL 9.8 UPGRADE The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().
• CVE-2017-11543 CRITICAL 9.8 DOWNGRADE tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.
• CVE-2017-11542 CRITICAL 9.8 DOWNGRADE tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.
• CVE-2017-11541 CRITICAL 9.8 DOWNGRADE tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-pr
• CVE-2017-11108 HIGH 7.5 DOWNGRADE tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and applicatio
• CVE-2016-8575 CRITICAL 9.8 UPGRADE The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnera
• CVE-2016-8574 CRITICAL 9.8 UPGRADE The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15_print().
• CVE-2016-7993 CRITICAL 9.8 UPGRADE A bug in util-print.c:relts_print() in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol
• CVE-2016-7992 CRITICAL 9.8 UPGRADE The Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-cip.c:cip_if_print().
• CVE-2016-7986 CRITICAL 9.8 UPGRADE The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions.
• CVE-2016-7985 CRITICAL 9.8 UPGRADE The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calm_fast_print().
• CVE-2016-7984 CRITICAL 9.8 UPGRADE The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftp_print().
• CVE-2016-7983 CRITICAL 9.8 UPGRADE The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().
• CVE-2016-7975 CRITICAL 9.8 UPGRADE The TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-tcp.c:tcp_print().
• CVE-2016-7974 CRITICAL 9.8 UPGRADE The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions.
• CVE-2016-7973 CRITICAL 9.8 UPGRADE The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions.
• CVE-2016-7940 CRITICAL 9.8 UPGRADE The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions.
• CVE-2016-7939 CRITICAL 9.8 UPGRADE The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions.
• CVE-2016-7938 CRITICAL 9.8 UPGRADE The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1_print_frame().
• CVE-2016-7937 CRITICAL 9.8 UPGRADE The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print().

FAQ

How do I fix tcpdump vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is tcpdump being exploited right now?

None of the tracked tcpdump CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which tcpdump CVE should I patch first?

CVE-2007-3798 currently ranks highest (77/100): Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to e.

RSS feed for tcpdump · ← Back to latest CVEs