tcpdump: multiple overflow issues in protocol decoding

The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions.

tcpdump: multiple overflow issues in protocol decoding

The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions.

Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer overflow.

tcpdump: multiple overflow issues in protocol decoding

The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions.

tcpdump: multiple overflow issues in protocol decoding

The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions.

busybox: out of bounds write (heap) due to integer underflow in udhcpc

Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, which triggers an out-of-bounds heap write.

gcc: Exploitable buffer overflow

Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.

tcpdump: multiple overflow issues in protocol decoding

The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1_print_frame().

tcpdump: multiple overflow issues in protocol decoding

The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print().

tcpdump: multiple overflow issues in protocol decoding

The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_print().

Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.

Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom.

tcpdump: multiple overflow issues in protocol decoding

The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp_print().

tcpdump: multiple overflow issues in protocol decoding

The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcp_print().

tcpdump: multiple overflow issues in protocol decoding

The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print().

tcpdump: multiple overflow issues in protocol decoding

The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum().

tcpdump: multiple overflow issues in protocol decoding

The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().

tcpdump: multiple overflow issues in protocol decoding

The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print().

tcpdump: multiple overflow issues in protocol decoding

The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper_parse_header().

tcpdump: multiple overflow issues in protocol decoding

The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print().