PatchTheCVEtcpdump vulnerabilities
Recent CVEs affecting tcpdump products. 2 tracked.
tcpdump has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-08-31. Highest priority: CVE-2024-8006 (score 19/100).
- CVE-2024-8006 MEDIUM 4.4 UPGRADE Remote packet capture support is disabled by default in libpcap
- CVE-2023-7256 MEDIUM 4.4 UPGRADE In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddres
FAQ
How do I fix tcpdump vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tcpdump being exploited right now?
None of the tracked tcpdump CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tcpdump CVE should I patch first?
CVE-2024-8006 currently ranks highest (19/100): Remote packet capture support is disabled by default in libpcap.