Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 183

Export CSV
CVE-2017-12901

tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser

The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2007-1218

tcpdump denial of service

Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based.

CVSS 2.0 · 6.8 Medium EPSS 2.9% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2007-3798

tcpdump BGP integer overflow

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

CVSS 3.1 · 9.8 Critical EPSS 70.4% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Mac Os X Mac Os X Server Ubuntu Linux and 5 more
CVE-2002-1350

security flaw

The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash).

CVSS 2.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Lbl Redhat
Products
Tcpdump Enterprise Linux Linux
CVE-2003-0145

security flaw

Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," allows remote attackers to cause a denial of service (infinite loop), a different vulnerability than CAN-2003-0093.

CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Lbl Redhat
Products
Tcpdump Enterprise Linux Linux
CVE-2001-1279

security flaw

Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026.

CVSS 2.0 · 7.5 High EPSS 4.8% KEV · Not listed
Vendors
Lbl Redhat
Products
Tcpdump Linux
CVE-2003-0093

security flaw

The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service (crash) via an invalid RADIUS packet with a header length field of 0, which causes tcpdump to generate data within an infinite loop.

CVSS 2.0 · 5.0 Medium EPSS 2.0% KEV · Not listed
Vendors
Lbl Redhat
Products
Tcpdump Enterprise Linux Linux
CVE-2003-0108

security flaw

isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop.

CVSS 2.0 · 5.0 Medium EPSS 11.3% KEV · Not listed
Vendors
Lbl Redhat
Products
Tcpdump Enterprise Linux Linux
CVE-2004-0183

security flaw

TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.

CVSS 2.0 · 5.0 Medium EPSS 5.6% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2004-0184

security flaw

Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.

CVSS 2.0 · 5.0 Medium EPSS 60.3% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2005-1267

security flaw

The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.

CVSS 2.0 · 5.0 Medium EPSS 13.5% KEV · Not listed
Vendors
Gentoo Lbl Mandrakesoft and 2 more
Products
Linux Tcpdump Mandrake Linux and 3 more
CVE-2005-1278

security flaw

The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet.

CVSS 2.0 · 5.0 Medium EPSS 10.8% KEV · Not listed
Vendors
Lbl Redhat
Products
Tcpdump Enterprise Linux
CVE-2005-1279

security flaw

tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.

CVSS 2.0 · 5.0 Medium EPSS 18.7% KEV · Not listed
Vendors
Lbl Redhat
Products
Tcpdump Enterprise Linux
CVE-2005-1280

security flaw

The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.

CVSS 2.0 · 5.0 Medium EPSS 10.2% KEV · Not listed
Vendors
Lbl Redhat
Products
Tcpdump Enterprise Linux
CVE-2003-0989

security flaw

tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.

CVSS 2.0 · 7.5 High EPSS 5.3% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Linux Tcpdump
CVE-2002-0380

security flaw

Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.

CVSS 2.0 · 7.5 High EPSS 5.0% KEV · Not listed
Vendors
Lbl Redhat
Products
Tcpdump Enterprise Linux Linux
CVE-2004-0055

security flaw

The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.

CVSS 2.0 · 5.0 Medium EPSS 3.6% KEV · Not listed
Vendors
Lbl Redhat
Products
Tcpdump Enterprise Linux Linux
CVE-2004-0057

security flaw

The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.

CVSS 2.0 · 5.0 Medium EPSS 5.3% KEV · Not listed
Vendors
Lbl Redhat
Products
Tcpdump Enterprise Linux Linux