CVE-2018-14879

tcpdump: Out of bounds read/write in in get_next_file() in tcpdump.c

The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().

CVSS 3.1 · 7 High EPSS 4.7% KEV · Not listed

Vendors

Apple Debian F5 and 4 more

Products

Mac Os X Debian Linux Traffix Signaling Delivery Controller and 4 more

CVE-2018-14470

tcpdump: Buffer over-read in babel_print_v2() in print-babel.c

The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 3 more

Products

Mac Os X Debian Linux Fedora and 3 more

CVE-2018-14468

tcpdump: Buffer over-read in mfr_print() function in print-fr.c

The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().

CVSS 3.1 · 7.5 High EPSS 4.0% KEV · Not listed

Vendors

Apple Debian F5 and 4 more

Products

Mac Os X Debian Linux Big-ip Access Policy Manager and 20 more

CVE-2018-14467

tcpdump: Buffer over-read in bgp_capabilities_print() in print-bgp.c

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 3 more

Products

Mac Os X Debian Linux Fedora and 3 more

CVE-2018-14462

tcpdump: Buffer over-read in icmp_print() function in print-icmp.c

The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed

Vendors

Apple Debian F5 and 4 more

Products

Mac Os X Debian Linux Traffix Signaling Delivery Controller and 4 more

CVE-2018-14461

tcpdump: Buffer over-read in ldp_tlv_print() function in print-ldp.c

The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 3 more

Products

Mac Os X Debian Linux Fedora and 3 more

CVE-2018-16452

tcpdump: Resource exhaustion in smb_fdata() funtion in smbutil.c

The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.

CVSS 3.1 · 7.5 High EPSS 4.0% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2018-16451

tcpdump: Buffer over-read in print_trans() function in print-smb.c

The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.

CVSS 3.1 · 9.8 Critical EPSS 4.0% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 3 more

Products

Mac Os X Debian Linux Fedora and 3 more

CVE-2018-16300

tcpdump: Resource exhaustion in bgp_attr_print() function in print-bgp.c

The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion.

CVSS 3.1 · 7.5 High EPSS 4.0% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2018-16230

tcpdump: Buffer over-read in bgp_attr_print() function in print-bgp.c

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).

CVSS 3.1 · 9.8 Critical EPSS 3.7% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 3 more

Products

Mac Os X Debian Linux Fedora and 3 more

CVE-2018-16228

tcpdump: Access to uninitialized buffer in print_prefix() function in print-hncp.c

The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().

CVSS 3.1 · 9.8 Critical EPSS 3.5% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 3 more

Products

Mac Os X Debian Linux Fedora and 3 more

CVE-2019-15167

tcpdump: Buffer over-read in vrrp_print() function in print-vrrp.c

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463.

CVSS 3.1 · 9.1 Critical EPSS 1.1% KEV · Not listed

Vendors

Tcpdump

Products

Tcpdump

CVE-2019-15166

lmp_print in tcpdump lacks certain boundary checks

lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.

CVSS 3.1 · 1.6 Low EPSS 4.8% KEV · Not listed

Vendors

Apple Canonical Debian and 5 more

Products

Mac Os X Ubuntu Linux Debian Linux and 7 more

CVE-2016-7975

tcpdump: multiple overflow issues in protocol decoding

The TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-tcp.c:tcp_print().

CVSS 3.0 · 9.8 Critical EPSS 3.4% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-12991

tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().

CVSS 3.0 · 9.8 Critical EPSS 2.4% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-7974

tcpdump: multiple overflow issues in protocol decoding

The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-7927

tcpdump: multiple overflow issues in protocol decoding

The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print().

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-12989

tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().

CVSS 3.0 · 7.5 High EPSS 2.3% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-7973

tcpdump: multiple overflow issues in protocol decoding

The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-12988

tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().

CVSS 3.0 · 9.8 Critical EPSS 2.4% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump