PatchTheCVE: tcpdumphttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-1801: The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted https://patchthecve.com/cve/CVE-2023-1801.htmlhttps://patchthecve.com/cve/CVE-2023-1801.htmlWed, 17 Jun 2026 05:28:47 +0000MEDIUM 6.5: The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.CVE-2019-15167: The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3https://patchthecve.com/cve/CVE-2019-15167.htmlhttps://patchthecve.com/cve/CVE-2019-15167.htmlWed, 17 Jun 2026 02:19:50 +0000CRITICAL 9.1: The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463.CVE-2020-8037: The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.https://patchthecve.com/cve/CVE-2020-8037.htmlhttps://patchthecve.com/cve/CVE-2020-8037.htmlWed, 17 Jun 2026 03:25:50 +0000HIGH 7.5: The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.CVE-2020-8036: The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.https://patchthecve.com/cve/CVE-2020-8036.htmlhttps://patchthecve.com/cve/CVE-2020-8036.htmlWed, 17 Jun 2026 03:25:50 +0000HIGH 7.5: The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.CVE-2019-15166: lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.https://patchthecve.com/cve/CVE-2019-15166.htmlhttps://patchthecve.com/cve/CVE-2019-15166.htmlWed, 17 Jun 2026 02:19:50 +0000LOW 1.6: lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.CVE-2018-16452: The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.https://patchthecve.com/cve/CVE-2018-16452.htmlhttps://patchthecve.com/cve/CVE-2018-16452.htmlWed, 17 Jun 2026 01:44:18 +0000HIGH 7.5: The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.CVE-2018-16451: The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSEhttps://patchthecve.com/cve/CVE-2018-16451.htmlhttps://patchthecve.com/cve/CVE-2018-16451.htmlWed, 17 Jun 2026 01:44:18 +0000HIGH 7.5: The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.CVE-2018-16301: The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile()https://patchthecve.com/cve/CVE-2018-16301.htmlhttps://patchthecve.com/cve/CVE-2018-16301.htmlThu, 08 Oct 2026 22:16:45 +0000HIGH 7.8: The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.CVE-2018-16300: The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlhttps://patchthecve.com/cve/CVE-2018-16300.htmlhttps://patchthecve.com/cve/CVE-2018-16300.htmlWed, 17 Jun 2026 01:44:03 +0000HIGH 7.5: The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion.CVE-2018-16230: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).https://patchthecve.com/cve/CVE-2018-16230.htmlhttps://patchthecve.com/cve/CVE-2018-16230.htmlWed, 17 Jun 2026 01:43:55 +0000HIGH 7.5: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).CVE-2018-16229: The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().https://patchthecve.com/cve/CVE-2018-16229.htmlhttps://patchthecve.com/cve/CVE-2018-16229.htmlWed, 17 Jun 2026 01:43:55 +0000HIGH 7.5: The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().CVE-2018-16228: The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().https://patchthecve.com/cve/CVE-2018-16228.htmlhttps://patchthecve.com/cve/CVE-2018-16228.htmlWed, 17 Jun 2026 01:43:55 +0000HIGH 7.5: The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().CVE-2018-16227: The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subhttps://patchthecve.com/cve/CVE-2018-16227.htmlhttps://patchthecve.com/cve/CVE-2018-16227.htmlWed, 17 Jun 2026 01:43:55 +0000HIGH 7.5: The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.CVE-2018-14882: The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.https://patchthecve.com/cve/CVE-2018-14882.htmlhttps://patchthecve.com/cve/CVE-2018-14882.htmlWed, 17 Jun 2026 01:41:49 +0000HIGH 7.5: The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.CVE-2018-14881: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPhttps://patchthecve.com/cve/CVE-2018-14881.htmlhttps://patchthecve.com/cve/CVE-2018-14881.htmlWed, 17 Jun 2026 01:41:49 +0000HIGH 7.5: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).CVE-2018-14880: The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().https://patchthecve.com/cve/CVE-2018-14880.htmlhttps://patchthecve.com/cve/CVE-2018-14880.htmlWed, 17 Jun 2026 01:41:48 +0000HIGH 7.5: The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().CVE-2018-14879: The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().https://patchthecve.com/cve/CVE-2018-14879.htmlhttps://patchthecve.com/cve/CVE-2018-14879.htmlWed, 17 Jun 2026 01:41:48 +0000HIGH 7.0: The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().CVE-2018-14470: The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().https://patchthecve.com/cve/CVE-2018-14470.htmlhttps://patchthecve.com/cve/CVE-2018-14470.htmlWed, 17 Jun 2026 01:41:04 +0000HIGH 7.5: The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().CVE-2018-14469: The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().https://patchthecve.com/cve/CVE-2018-14469.htmlhttps://patchthecve.com/cve/CVE-2018-14469.htmlWed, 17 Jun 2026 01:41:04 +0000HIGH 7.5: The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().CVE-2018-14468: The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().https://patchthecve.com/cve/CVE-2018-14468.htmlhttps://patchthecve.com/cve/CVE-2018-14468.htmlWed, 17 Jun 2026 01:41:04 +0000HIGH 7.5: The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().CVE-2018-14467: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPhttps://patchthecve.com/cve/CVE-2018-14467.htmlhttps://patchthecve.com/cve/CVE-2018-14467.htmlWed, 17 Jun 2026 01:41:03 +0000HIGH 7.5: The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).CVE-2018-14466: The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_inserthttps://patchthecve.com/cve/CVE-2018-14466.htmlhttps://patchthecve.com/cve/CVE-2018-14466.htmlWed, 17 Jun 2026 01:41:03 +0000HIGH 7.5: The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().CVE-2018-14465: The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().https://patchthecve.com/cve/CVE-2018-14465.htmlhttps://patchthecve.com/cve/CVE-2018-14465.htmlWed, 17 Jun 2026 01:41:03 +0000HIGH 7.5: The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().CVE-2018-14464: The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().https://patchthecve.com/cve/CVE-2018-14464.htmlhttps://patchthecve.com/cve/CVE-2018-14464.htmlWed, 17 Jun 2026 01:41:03 +0000HIGH 7.5: The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().CVE-2018-14463: The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2https://patchthecve.com/cve/CVE-2018-14463.htmlhttps://patchthecve.com/cve/CVE-2018-14463.htmlWed, 17 Jun 2026 01:41:02 +0000HIGH 7.5: The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.CVE-2018-14462: The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().https://patchthecve.com/cve/CVE-2018-14462.htmlhttps://patchthecve.com/cve/CVE-2018-14462.htmlWed, 17 Jun 2026 01:41:02 +0000HIGH 7.5: The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().CVE-2018-14461: The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().https://patchthecve.com/cve/CVE-2018-14461.htmlhttps://patchthecve.com/cve/CVE-2018-14461.htmlWed, 17 Jun 2026 01:41:02 +0000HIGH 7.5: The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().CVE-2018-10105: tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2).https://patchthecve.com/cve/CVE-2018-10105.htmlhttps://patchthecve.com/cve/CVE-2018-10105.htmlWed, 17 Jun 2026 01:33:30 +0000CRITICAL 9.8: tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2).CVE-2018-10103: tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).https://patchthecve.com/cve/CVE-2018-10103.htmlhttps://patchthecve.com/cve/CVE-2018-10103.htmlWed, 17 Jun 2026 01:33:30 +0000CRITICAL 9.8: tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).CVE-2019-1010220: tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-readhttps://patchthecve.com/cve/CVE-2019-1010220.htmlhttps://patchthecve.com/cve/CVE-2019-1010220.htmlWed, 17 Jun 2026 02:09:52 +0000LOW 3.3: tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must openCVE-2018-19519: In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafthttps://patchthecve.com/cve/CVE-2018-19519.htmlhttps://patchthecve.com/cve/CVE-2018-19519.htmlWed, 17 Jun 2026 01:49:26 +0000MEDIUM 5.5: In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.CVE-2017-16808: tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in https://patchthecve.com/cve/CVE-2017-16808.htmlhttps://patchthecve.com/cve/CVE-2017-16808.htmlWed, 17 Jun 2026 01:09:57 +0000MEDIUM 5.5: tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.CVE-2015-3138: print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault anhttps://patchthecve.com/cve/CVE-2015-3138.htmlhttps://patchthecve.com/cve/CVE-2015-3138.htmlWed, 17 Jun 2026 00:25:22 +0000HIGH 7.5: print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).CVE-2017-13725: The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().https://patchthecve.com/cve/CVE-2017-13725.htmlhttps://patchthecve.com/cve/CVE-2017-13725.htmlWed, 17 Jun 2026 01:05:03 +0000CRITICAL 9.8: The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().CVE-2017-13690: The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.https://patchthecve.com/cve/CVE-2017-13690.htmlhttps://patchthecve.com/cve/CVE-2017-13690.htmlWed, 17 Jun 2026 01:04:59 +0000CRITICAL 9.8: The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.CVE-2017-13689: The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().https://patchthecve.com/cve/CVE-2017-13689.htmlhttps://patchthecve.com/cve/CVE-2017-13689.htmlWed, 17 Jun 2026 01:04:59 +0000CRITICAL 9.8: The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().CVE-2017-13688: The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().https://patchthecve.com/cve/CVE-2017-13688.htmlhttps://patchthecve.com/cve/CVE-2017-13688.htmlWed, 17 Jun 2026 01:04:59 +0000CRITICAL 9.8: The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().CVE-2017-13687: The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().https://patchthecve.com/cve/CVE-2017-13687.htmlhttps://patchthecve.com/cve/CVE-2017-13687.htmlWed, 17 Jun 2026 01:04:59 +0000CRITICAL 9.8: The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().CVE-2017-13055: The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subhttps://patchthecve.com/cve/CVE-2017-13055.htmlhttps://patchthecve.com/cve/CVE-2017-13055.htmlWed, 17 Jun 2026 01:04:26 +0000CRITICAL 9.8: The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().CVE-2017-13054: The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().https://patchthecve.com/cve/CVE-2017-13054.htmlhttps://patchthecve.com/cve/CVE-2017-13054.htmlWed, 17 Jun 2026 01:04:26 +0000CRITICAL 9.8: The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().CVE-2017-13053: The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().https://patchthecve.com/cve/CVE-2017-13053.htmlhttps://patchthecve.com/cve/CVE-2017-13053.htmlWed, 17 Jun 2026 01:04:26 +0000CRITICAL 9.8: The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().CVE-2017-13052: The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().https://patchthecve.com/cve/CVE-2017-13052.htmlhttps://patchthecve.com/cve/CVE-2017-13052.htmlWed, 17 Jun 2026 01:04:26 +0000CRITICAL 9.8: The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().CVE-2017-13051: The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().https://patchthecve.com/cve/CVE-2017-13051.htmlhttps://patchthecve.com/cve/CVE-2017-13051.htmlWed, 17 Jun 2026 01:04:26 +0000CRITICAL 9.8: The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().CVE-2017-13050: The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print()https://patchthecve.com/cve/CVE-2017-13050.htmlhttps://patchthecve.com/cve/CVE-2017-13050.htmlWed, 17 Jun 2026 01:04:26 +0000CRITICAL 9.8: The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().CVE-2017-13049: The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().https://patchthecve.com/cve/CVE-2017-13049.htmlhttps://patchthecve.com/cve/CVE-2017-13049.htmlWed, 17 Jun 2026 01:04:26 +0000CRITICAL 9.8: The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().CVE-2017-13048: The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().https://patchthecve.com/cve/CVE-2017-13048.htmlhttps://patchthecve.com/cve/CVE-2017-13048.htmlWed, 17 Jun 2026 01:04:25 +0000CRITICAL 9.8: The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().CVE-2017-13047: The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().https://patchthecve.com/cve/CVE-2017-13047.htmlhttps://patchthecve.com/cve/CVE-2017-13047.htmlWed, 17 Jun 2026 01:04:25 +0000CRITICAL 9.8: The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().CVE-2017-13046: The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().https://patchthecve.com/cve/CVE-2017-13046.htmlhttps://patchthecve.com/cve/CVE-2017-13046.htmlWed, 17 Jun 2026 01:04:25 +0000CRITICAL 9.8: The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().CVE-2017-13045: The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().https://patchthecve.com/cve/CVE-2017-13045.htmlhttps://patchthecve.com/cve/CVE-2017-13045.htmlWed, 17 Jun 2026 01:04:25 +0000CRITICAL 9.8: The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().CVE-2017-13044: The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().https://patchthecve.com/cve/CVE-2017-13044.htmlhttps://patchthecve.com/cve/CVE-2017-13044.htmlWed, 17 Jun 2026 01:04:25 +0000CRITICAL 9.8: The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().