PatchTheCVElbl vulnerabilities
Recent CVEs affecting lbl products. 17 tracked.
lbl has 17 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2005-06-10. Highest priority: CVE-2000-1026 (score 63/100).
- CVE-1999-1024 HIGH 7.5 DOWNGRADE ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a ze
- CVE-2000-1026 HIGH 10.0 DOWNGRADE Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.
- CVE-2000-0949 HIGH 7.2 DOWNGRADE MITIGATE Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrar
- CVE-2005-1280 MEDIUM 5.0 UPGRADE The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (inf
- CVE-2005-1279 MEDIUM 5.0 UPGRADE tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (
- CVE-2005-1278 MEDIUM 5.0 UPGRADE The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to c
- CVE-2005-1267 MEDIUM 5.0 DOWNGRADE MITIGATE The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix
- CVE-2004-0057 MEDIUM 5.0 UPGRADE The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows re
- CVE-2004-0055 MEDIUM 5.0 DOWNGRADE The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to caus
- CVE-2003-1029 MEDIUM 5.0 DOWNGRADE The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (in
- CVE-2003-0145 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes pro
- CVE-2003-0108 MEDIUM 5.0 DOWNGRADE isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consum
- CVE-2003-0093 MEDIUM 5.0 DOWNGRADE The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service (crash) v
- CVE-2002-1350 HIGH 7.5 UPGRADE The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers
- CVE-2002-0380 HIGH 7.5 UPGRADE Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly
- CVE-2001-1279 HIGH 7.5 DOWNGRADE Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of serv
- CVE-2000-0333 MEDIUM 5.0 DOWNGRADE DOWNGRADE tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malforme
FAQ
How do I fix lbl vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lbl being exploited right now?
None of the tracked lbl CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lbl CVE should I patch first?
CVE-2000-1026 currently ranks highest (63/100): Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands..