tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file.
Max CVSS
4.3
EPSS Score
0.08%
Published
2019-07-22
Updated
2019-08-20
lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
Max CVSS
7.5
EPSS Score
0.59%
Published
2019-10-03
Updated
2022-04-13
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
Max CVSS
5.3
EPSS Score
0.51%
Published
2019-10-03
Updated
2022-04-08
rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source.
Max CVSS
5.3
EPSS Score
1.62%
Published
2019-10-03
Updated
2019-10-27
rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daemon crash) if a crypt() call fails.
Max CVSS
7.5
EPSS Score
2.42%
Published
2019-10-03
Updated
2019-10-27
rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames.
Max CVSS
5.3
EPSS Score
1.62%
Published
2019-10-03
Updated
2019-10-27
rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request.
Max CVSS
5.3
EPSS Score
1.62%
Published
2019-10-03
Updated
2020-08-24
The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.
Max CVSS
7.5
EPSS Score
0.79%
Published
2019-10-03
Updated
2019-10-11
The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.
Max CVSS
7.5
EPSS Score
0.33%
Published
2019-10-03
Updated
2020-01-20
The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.
Max CVSS
7.8
EPSS Score
0.10%
Published
2019-10-03
Updated
2022-02-14
The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion.
Max CVSS
7.5
EPSS Score
0.79%
Published
2019-10-03
Updated
2019-10-11
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).
Max CVSS
7.5
EPSS Score
0.33%
Published
2019-10-03
Updated
2020-01-20
The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().
Max CVSS
7.5
EPSS Score
0.33%
Published
2019-10-03
Updated
2023-08-16
The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().
Max CVSS
7.5
EPSS Score
0.33%
Published
2019-10-03
Updated
2020-01-20
The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.
Max CVSS
7.5
EPSS Score
0.33%
Published
2019-10-03
Updated
2020-01-20
The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.
Max CVSS
7.5
EPSS Score
0.33%
Published
2019-10-03
Updated
2023-08-16
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).
Max CVSS
7.5
EPSS Score
0.33%
Published
2019-10-03
Updated
2020-01-20
The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
Max CVSS
7.5
EPSS Score
0.33%
Published
2019-10-03
Updated
2023-08-16
The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
Max CVSS
7.0
EPSS Score
0.21%
Published
2019-10-03
Updated
2023-08-16
The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().
Max CVSS
7.5
EPSS Score
0.33%
Published
2019-10-03
Updated
2020-01-20
The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
Max CVSS
7.5
EPSS Score
0.33%
Published
2019-10-03
Updated
2023-08-16
The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
Max CVSS
7.5
EPSS Score
0.33%
Published
2019-10-03
Updated
2023-08-16
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).
Max CVSS
7.5
EPSS Score
0.33%
Published
2019-10-03
Updated
2020-01-20
The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().
Max CVSS
7.5
EPSS Score
0.33%
Published
2019-10-03
Updated
2020-01-20
The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
Max CVSS
7.5
EPSS Score
0.33%
Published
2019-10-03
Updated
2023-08-16
31 vulnerabilities found
1 2
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!