Export limit exceeded: 10794 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 190

Export CSV
CVE-2017-5482

tcpdump: multiple overflow issues in protocol decoding

The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2016-8575.

CVSS 3.0 · 9.8 Critical EPSS 5.5% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-5483

tcpdump: multiple overflow issues in protocol decoding

The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse().

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-5484

tcpdump: multiple overflow issues in protocol decoding

The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print().

CVSS 3.0 · 9.8 Critical EPSS 6.2% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-5485

tcpdump: multiple overflow issues in protocol decoding

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap().

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-5486

tcpdump: multiple overflow issues in protocol decoding

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().

CVSS 3.0 · 9.8 Critical EPSS 3.4% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2015-2155

tcpdump: force printer vulnerability

The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

CVSS 2.0 · 7.5 High EPSS 7.8% KEV · Not listed
Vendors
Debian Fedoraproject Opensuse and 3 more
Products
Debian Linux Fedora Opensuse and 3 more
CVE-2015-0261

tcpdump: IPv6 mobility printer mobility_opt_print() typecastimg/signedness error

Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.

CVSS 2.0 · 7.5 High EPSS 6.8% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2015-2153

tcpdump: tcp printer rpki_rtr_pdu_print() missing length check

The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU).

CVSS 2.0 · 5.0 Medium EPSS 18.5% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2015-2154

tcpdump: ethernet printer osi_print_cksum() missing sanity checks out-of-bounds read

The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value.

CVSS 2.0 · 5.0 Medium EPSS 4.5% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2023-1801

tcpdump: OOB write in SMB decoder

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Tcpdump
Products
Tcpdump
CVE-2020-8036

str2tokbuf used incorrectly by print-someip.c

The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Tcpdump
Products
Tcpdump
CVE-2019-15164

libpcap: Server side request forgery in rpcapd/daemon.c

rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source.

CVSS 3.1 · 5.3 Medium EPSS 2.9% KEV · Not listed
Vendors
Tcpdump
Products
Libpcap
CVE-2019-15163

libpcap: Null pointer dereference in rpcapd/daemon.c

rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daemon crash) if a crypt() call fails.

CVSS 3.1 · 7.5 High EPSS 4.4% KEV · Not listed
Vendors
Tcpdump
Products
Libpcap
CVE-2019-15162

libpcap: Information disclosure in rpcapd/daemon.c

rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames.

CVSS 3.1 · 5.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Opengroup Tcpdump
Products
Unix Libpcap
CVE-2019-15161

libpcap: Mishandled length values in reused variables

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request.

CVSS 3.1 · 5.3 Medium EPSS 2.8% KEV · Not listed
Vendors
Tcpdump
Products
Libpcap
CVE-2019-1010220

tcpdump: buffer over-read in function print_prefix in print-hncp.c

tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file.

CVSS 3.0 · 3.3 Low EPSS 1.3% KEV · Not listed
Vendors
Tcpdump
Products
Tcpdump
CVE-2018-19519

tcpdump: Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap

In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.

CVSS 3.0 · 5.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump