# |
CVE ID
|
CWE ID
|
# of Exploits
|
Vulnerability Type(s)
|
Publish Date
|
Update Date
|
Score
|
Gained Access Level
|
Access
|
Complexity
|
Authentication
|
Conf.
|
Integ.
|
Avail.
|
1 |
CVE-2019-15167 |
125 |
|
|
2022-08-27 |
2022-09-01 |
0.0 |
None |
??? |
??? |
??? |
??? |
??? |
??? |
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463. |
2 |
CVE-2019-15166 |
120 |
|
|
2019-10-03 |
2022-04-13 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks. |
3 |
CVE-2018-16452 |
674 |
|
|
2019-10-03 |
2019-10-11 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion. |
4 |
CVE-2018-16451 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN. |
5 |
CVE-2018-16301 |
120 |
|
Overflow |
2019-10-03 |
2022-02-14 |
4.4 |
None |
Local |
Medium |
Not required |
Partial |
Partial |
Partial |
The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump. |
6 |
CVE-2018-16300 |
674 |
|
|
2019-10-03 |
2019-10-11 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion. |
7 |
CVE-2018-16230 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI). |
8 |
CVE-2018-16229 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option(). |
9 |
CVE-2018-16228 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix(). |
10 |
CVE-2018-16227 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield. |
11 |
CVE-2018-14882 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c. |
12 |
CVE-2018-14881 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART). |
13 |
CVE-2018-14880 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr(). |
14 |
CVE-2018-14879 |
120 |
|
Overflow |
2019-10-03 |
2020-01-20 |
5.1 |
None |
Remote |
High |
Not required |
Partial |
Partial |
Partial |
The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file(). |
15 |
CVE-2018-14470 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2(). |
16 |
CVE-2018-14469 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print(). |
17 |
CVE-2018-14468 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print(). |
18 |
CVE-2018-14467 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP). |
19 |
CVE-2018-14466 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert(). |
20 |
CVE-2018-14465 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
21 |
CVE-2018-14464 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs(). |
22 |
CVE-2018-14463 |
125 |
|
|
2019-10-03 |
2022-08-27 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167. |
23 |
CVE-2018-14462 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print(). |
24 |
CVE-2018-14461 |
125 |
|
|
2019-10-03 |
2020-01-20 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print(). |
25 |
CVE-2018-10105 |
20 |
|
|
2019-10-03 |
2019-10-11 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2). |
26 |
CVE-2018-10103 |
20 |
|
|
2019-10-03 |
2019-10-11 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2). |
27 |
CVE-2017-13725 |
125 |
|
|
2017-09-14 |
2020-10-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print(). |
28 |
CVE-2017-13690 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. |
29 |
CVE-2017-13689 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print(). |
30 |
CVE-2017-13688 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print(). |
31 |
CVE-2017-13687 |
125 |
|
|
2017-09-14 |
2020-10-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print(). |
32 |
CVE-2017-13055 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv(). |
33 |
CVE-2017-13054 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print(). |
34 |
CVE-2017-13053 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info(). |
35 |
CVE-2017-13052 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print(). |
36 |
CVE-2017-13051 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
37 |
CVE-2017-13050 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print(). |
38 |
CVE-2017-13049 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print(). |
39 |
CVE-2017-13048 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
40 |
CVE-2017-13047 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print(). |
41 |
CVE-2017-13046 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). |
42 |
CVE-2017-13045 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print(). |
43 |
CVE-2017-13044 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print(). |
44 |
CVE-2017-13043 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn(). |
45 |
CVE-2017-13042 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print(). |
46 |
CVE-2017-13041 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print(). |
47 |
CVE-2017-13040 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions. |
48 |
CVE-2017-13039 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. |
49 |
CVE-2017-13038 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp(). |
50 |
CVE-2017-13037 |
125 |
|
|
2017-09-14 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts(). |