GCVE - cpe:2.3:a:tcpdump:tcpdump:4.9.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tcpdump:tcpdump:4.9.2:*:*:*:*:*:*:*

part: a version: 4.9.2 update: *

Vendor	Tcpdump (`fda3cb69-27f3-50fc-92b3-91c9b148b161`)
Product	Tcpdump (`26464897-c8fc-59cf-9736-9e5602f41fc3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/tcpdump`	purl2cpe	2026-06-01 10:15:25.371294
`pkg:deb/ubuntu/tcpdump`	purl2cpe	2026-06-01 10:15:25.371295
`pkg:github/the-tcpdump-group/tcpdump`	purl2cpe	2026-06-01 10:15:25.371296
`pkg:rpm/fedora/tcpdump`	purl2cpe	2026-06-01 10:15:25.371298
`pkg:rpm/opensuse/tcpdump`	purl2cpe	2026-06-01 10:15:25.371299

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-1010220`	vulnerable	2026-06-08 05:12:21.706939	Details available tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file. Published: 2019-07-22T17:30:14.000Z Updated: 2024-08-05T03:07:18.432Z Open on db.gcve.eu Reference links https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9.2/print-hncp.c https://github.com/the-tcpdump-group/tcpdump/blob/master/print-hncp.c https://github.com/the-tcpdump-group/tcpdump/commits/master/print-hncp.c http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00065.html http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19519`	vulnerable	2026-06-08 05:11:15.827543	Details available In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization. Published: 2018-11-25T20:00:00.000Z Updated: 2024-08-05T11:37:11.527Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/106098 https://github.com/zyingp/temp/blob/master/tcpdump.md https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-16808`	vulnerable	2026-06-08 05:09:01.089074	Details available tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c. Published: 2017-11-13T21:00:00.000Z Updated: 2024-08-05T20:35:21.042Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1039773 https://github.com/the-tcpdump-group/tcpdump/issues/645 http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00065.html https://seclists.org/bugtraq/2019/Oct/2 https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.