GCVE - cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*

part: a version: 4.9.0 update: *

Vendor	Tcpdump (`fda3cb69-27f3-50fc-92b3-91c9b148b161`)
Product	Tcpdump (`26464897-c8fc-59cf-9736-9e5602f41fc3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/tcpdump`	purl2cpe	2026-06-01 10:15:25.371280
`pkg:deb/ubuntu/tcpdump`	purl2cpe	2026-06-01 10:15:25.371282
`pkg:github/the-tcpdump-group/tcpdump`	purl2cpe	2026-06-01 10:15:25.371283
`pkg:rpm/fedora/tcpdump`	purl2cpe	2026-06-01 10:15:25.371284
`pkg:rpm/opensuse/tcpdump`	purl2cpe	2026-06-01 10:15:25.371286

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-11543`	vulnerable	2026-06-08 05:08:38.068397	Details available tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c. Published: 2017-07-23T03:00:00.000Z Updated: 2024-08-05T18:12:40.233Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201709-23 https://support.apple.com/HT208221 http://www.debian.org/security/2017/dsa-3971 http://www.securitytracker.com/id/1039307 http://www.securityfocus.com/bid/99939	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11542`	vulnerable	2026-06-08 05:08:38.068046	Details available tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c. Published: 2017-07-23T03:00:00.000Z Updated: 2024-08-05T18:12:40.254Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201709-23 https://support.apple.com/HT208221 http://www.debian.org/security/2017/dsa-3971 http://www.securitytracker.com/id/1039307 https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/print-pim	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11541`	vulnerable	2026-06-08 05:08:38.067521	Details available tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c. Published: 2017-07-23T03:00:00.000Z Updated: 2024-08-05T18:12:40.221Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201709-23 https://support.apple.com/HT208221 http://www.debian.org/security/2017/dsa-3971 http://www.securitytracker.com/id/1039307 http://www.securityfocus.com/bid/99941	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11108`	vulnerable	2026-06-08 05:08:36.845285	Details available tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol. Published: 2017-07-08T17:00:00.000Z Updated: 2024-08-05T17:57:57.636Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201709-23 https://support.apple.com/HT208221 http://www.debian.org/security/2017/dsa-3971 https://bugzilla.redhat.com/show_bug.cgi?id=1468504 https://access.redhat.com/errata/RHEA-2018:0705	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.