https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-1267.htmlhttps://patchthecve.com/cve/CVE-2005-1267.htmlTue, 16 Jun 2026 22:12:45 +0000MEDIUM 5.0: The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.https://patchthecve.com/cve/CVE-2005-1280.htmlhttps://patchthecve.com/cve/CVE-2005-1280.htmlTue, 16 Jun 2026 22:12:46 +0000MEDIUM 5.0: The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.https://patchthecve.com/cve/CVE-2005-1279.htmlhttps://patchthecve.com/cve/CVE-2005-1279.htmlTue, 16 Jun 2026 22:12:46 +0000MEDIUM 5.0: tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.https://patchthecve.com/cve/CVE-2005-1278.htmlhttps://patchthecve.com/cve/CVE-2005-1278.htmlTue, 16 Jun 2026 22:12:46 +0000MEDIUM 5.0: The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet.https://patchthecve.com/cve/CVE-2004-0057.htmlhttps://patchthecve.com/cve/CVE-2004-0057.htmlTue, 16 Jun 2026 22:04:50 +0000MEDIUM 5.0: The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVhttps://patchthecve.com/cve/CVE-2004-0055.htmlhttps://patchthecve.com/cve/CVE-2004-0055.htmlTue, 16 Jun 2026 22:04:50 +0000MEDIUM 5.0: The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.https://patchthecve.com/cve/CVE-2003-1029.htmlhttps://patchthecve.com/cve/CVE-2003-1029.htmlTue, 16 Jun 2026 22:03:23 +0000MEDIUM 5.0: The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets.https://patchthecve.com/cve/CVE-2003-0145.htmlhttps://patchthecve.com/cve/CVE-2003-0145.htmlTue, 16 Jun 2026 22:01:38 +0000MEDIUM 5.0: Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," allows remote attackers to cause a denial of service (infinite loop), a different vulnerability than CAN-2003-0093.https://patchthecve.com/cve/CVE-2003-0108.htmlhttps://patchthecve.com/cve/CVE-2003-0108.htmlTue, 16 Jun 2026 22:01:32 +0000MEDIUM 5.0: isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop.https://patchthecve.com/cve/CVE-2003-0093.htmlhttps://patchthecve.com/cve/CVE-2003-0093.htmlTue, 16 Jun 2026 22:01:30 +0000MEDIUM 5.0: The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service (crash) via an invalid RADIUS packet with a header length field of 0, which causes tcpdump to generate data within an infinite loop.https://patchthecve.com/cve/CVE-2002-1350.htmlhttps://patchthecve.com/cve/CVE-2002-1350.htmlTue, 16 Jun 2026 21:59:09 +0000HIGH 7.5: The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash).https://patchthecve.com/cve/CVE-2002-0380.htmlhttps://patchthecve.com/cve/CVE-2002-0380.htmlTue, 16 Jun 2026 21:57:19 +0000HIGH 7.5: Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.https://patchthecve.com/cve/CVE-1999-1024.htmlhttps://patchthecve.com/cve/CVE-1999-1024.htmlFri, 25 Sep 2026 20:10:00 +0000HIGH 7.5: ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet.https://patchthecve.com/cve/CVE-2001-1279.htmlhttps://patchthecve.com/cve/CVE-2001-1279.htmlTue, 16 Jun 2026 21:55:57 +0000HIGH 7.5: Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026.https://patchthecve.com/cve/CVE-2000-0949.htmlhttps://patchthecve.com/cve/CVE-2000-0949.htmlWed, 23 Sep 2026 10:10:00 +0000HIGH 7.2: Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option.https://patchthecve.com/cve/CVE-2000-1026.htmlhttps://patchthecve.com/cve/CVE-2000-1026.htmlWed, 23 Sep 2026 14:10:00 +0000HIGH 10.0: Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.https://patchthecve.com/cve/CVE-2000-0333.htmlhttps://patchthecve.com/cve/CVE-2000-0333.htmlTue, 16 Jun 2026 21:51:29 +0000MEDIUM 5.0: tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.