Vulnerabilities > Tcpdump

DATE CVE VULNERABILITY TITLE RISK
2019-10-03 CVE-2018-14465 Out-of-bounds Read vulnerability in multiple products
The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
7.5
2019-10-03 CVE-2018-14464 Out-of-bounds Read vulnerability in multiple products
The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().
7.5
2019-10-03 CVE-2018-14463 Out-of-bounds Read vulnerability in multiple products
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.
7.5
2019-10-03 CVE-2018-14462 Out-of-bounds Read vulnerability in multiple products
The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
7.5
2019-10-03 CVE-2018-14461 Out-of-bounds Read vulnerability in multiple products
The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().
7.5
2019-10-03 CVE-2018-10105 Improper Input Validation vulnerability in Tcpdump
tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2).
network
low complexity
tcpdump CWE-20
critical
9.8
2019-10-03 CVE-2018-10103 Improper Input Validation vulnerability in Tcpdump
tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).
network
low complexity
tcpdump CWE-20
critical
9.8
2019-07-22 CVE-2019-1010220 Out-of-bounds Read vulnerability in Tcpdump 4.9.2
tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read.
local
low complexity
tcpdump CWE-125
3.3
2018-11-25 CVE-2018-19519 Missing Initialization of Resource vulnerability in Tcpdump 4.9.2
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
local
low complexity
tcpdump CWE-909
5.5
2017-11-13 CVE-2017-16808 Out-of-bounds Read vulnerability in Tcpdump 4.9.2
tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.
local
low complexity
tcpdump CWE-125
5.5