Tcpdump CVEs and Security Vulnerabilities

CVE-2017-13687

tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser

The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().

CVSS 3.1 · 9.8 Critical EPSS 3.3% KEV · Not listed

Vendors

Debian Redhat Tcpdump

Products

Debian Linux Enterprise Linux Tcpdump

CVE-2017-13055

tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-13054

tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-13053

tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-13050

tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser

The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().

CVSS 3.1 · 9.8 Critical EPSS 4.6% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-13048

tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-13047

tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-13045

tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser

The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().

CVSS 3.1 · 9.8 Critical EPSS 3.4% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-13041

tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().

CVSS 3.1 · 9.8 Critical EPSS 4.6% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-13040

tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser

The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.

CVSS 3.1 · 9.8 Critical EPSS 4.6% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-13038

tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser

The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().

CVSS 3.1 · 9.8 Critical EPSS 4.5% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2018-14882

tcpdump: Buffer over-read in function rpl_dio_printopt in print-icmp6.c

The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.

CVSS 3.1 · 9.8 Critical EPSS 3.7% KEV · Not listed

Vendors

Apple Debian F5 and 4 more

Products

Mac Os X Debian Linux Traffix Signaling Delivery Controller and 4 more

CVE-2018-14881

tcpdump: Buffer over-read in bgp_capabilities_print() function in print-bgp.c

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).

CVSS 3.1 · 9.8 Critical EPSS 4.8% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 3 more

Products

Mac Os X Debian Linux Fedora and 3 more

CVE-2018-14879

tcpdump: Out of bounds read/write in in get_next_file() in tcpdump.c

The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().

CVSS 3.1 · 7 High EPSS 4.7% KEV · Not listed

Vendors

Apple Debian F5 and 4 more

Products

Mac Os X Debian Linux Traffix Signaling Delivery Controller and 4 more

CVE-2018-14470

tcpdump: Buffer over-read in babel_print_v2() in print-babel.c

The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 3 more

Products

Mac Os X Debian Linux Fedora and 3 more

CVE-2018-14468

tcpdump: Buffer over-read in mfr_print() function in print-fr.c

The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().

CVSS 3.1 · 7.5 High EPSS 4.0% KEV · Not listed

Vendors

Apple Debian F5 and 4 more

Products

Mac Os X Debian Linux Big-ip Access Policy Manager and 20 more

CVE-2018-14467

tcpdump: Buffer over-read in bgp_capabilities_print() in print-bgp.c

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 3 more

Products

Mac Os X Debian Linux Fedora and 3 more

CVE-2018-14462

tcpdump: Buffer over-read in icmp_print() function in print-icmp.c

The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed

Vendors

Apple Debian F5 and 4 more

Products

Mac Os X Debian Linux Traffix Signaling Delivery Controller and 4 more

CVE-2018-14461

tcpdump: Buffer over-read in ldp_tlv_print() function in print-ldp.c

The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 3 more

Products

Mac Os X Debian Linux Fedora and 3 more

CVE-2018-16452

tcpdump: Resource exhaustion in smb_fdata() funtion in smbutil.c

The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.

CVSS 3.1 · 7.5 High EPSS 4.0% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

Search vulnerabilities

tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser

tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser

tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser

tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser

tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser

tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser

tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser

tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser

tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser

tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser

tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser

tcpdump: Buffer over-read in function rpl_dio_printopt in print-icmp6.c

tcpdump: Buffer over-read in bgp_capabilities_print() function in print-bgp.c

tcpdump: Out of bounds read/write in in get_next_file() in tcpdump.c

tcpdump: Buffer over-read in babel_print_v2() in print-babel.c

tcpdump: Buffer over-read in mfr_print() function in print-fr.c

tcpdump: Buffer over-read in bgp_capabilities_print() in print-bgp.c

tcpdump: Buffer over-read in icmp_print() function in print-icmp.c

tcpdump: Buffer over-read in ldp_tlv_print() function in print-ldp.c

tcpdump: Resource exhaustion in smb_fdata() funtion in smbutil.c