GCVE - cpe:2.3:a:lbl:tcpdump:3.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:lbl:tcpdump:3.5:*:*:*:*:*:*:*

part: a version: 3.5 update: *

Vendor	Lbl (`b7034912-26ef-5a77-bab5-96dad47fd079`)
Product	Tcpdump (`2fa9b5c5-dc4d-5683-922f-d71dd8b2b52e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/tcpdump`	purl2cpe	2026-06-01 10:17:49.343619
`pkg:deb/ubuntu/tcpdump`	purl2cpe	2026-06-01 10:17:49.343621
`pkg:github/the-tcpdump-group/tcpdump`	purl2cpe	2026-06-01 10:17:49.343623
`pkg:gitlab/redhat/tcpdump`	purl2cpe	2026-06-01 10:17:49.343624
`pkg:rpm/fedora/tcpdump`	purl2cpe	2026-06-01 10:17:49.343625
`pkg:rpm/opensuse/tcpdump`	purl2cpe	2026-06-01 10:17:49.343627
`pkg:sourceforge/tcpdump`	purl2cpe	2026-06-01 10:17:49.343628

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-1267`	vulnerable	2026-06-08 04:48:26.172213	Details available The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet. Published: 2005-06-20T04:00:00.000Z Updated: 2024-08-07T21:44:05.956Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/13906 http://secunia.com/advisories/17118 http://www.trustix.org/errata/2005/0028/ https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=159208 http://secunia.com/advisories/15634/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1029`	vulnerable	2026-06-08 04:47:23.195055	Details available The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets. Published: 2004-01-15T05:00:00.000Z Updated: 2024-08-08T02:12:35.783Z Open on db.gcve.eu Reference links http://secunia.com/advisories/10718 http://secunia.com/advisories/10668 http://marc.info/?l=tcpdump-workers&m=107228187124962&w=2 http://secunia.com/advisories/10636 http://www.securitytracker.com/id?1008748	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0093`	vulnerable	2026-06-08 04:47:20.488830	Details available The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service (crash) via an invalid RADIUS packet with a header length field of 0, which causes tcpdump to generate data within an infinite loop. Published: 2004-09-01T04:00:00.000Z Updated: 2024-08-08T01:43:35.344Z Open on db.gcve.eu Reference links http://www.debian.org/security/2003/dsa-261 http://www.redhat.com/support/errata/RHSA-2003-033.html http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=81585 http://www.redhat.com/support/errata/RHSA-2003-214.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2000-1026`	vulnerable	2026-06-08 04:45:19.162959	Details available Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands. Published: 2001-01-22T05:00:00.000Z Updated: 2024-08-08T05:37:32.405Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/5480 ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:61.tcpdump.v1.1.asc http://www.securityfocus.com/bid/1870 http://archives.neohapsis.com/archives/linux/suse/2000-q4/0681.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.