Approved changes feed: RSS · Atom
cpe:2.3:a:the_tcpdump_group:tcpdump:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | The Tcpdump Group (faf79470-ac05-5c75-92a1-9deebc7c603e) |
|---|---|
| Product | Tcpdump (5ee2ec27-bc72-5f2e-9749-94aa21174f8c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-2397 |
vulnerable | 2026-06-08 06:33:31.012673 |
infinite loop in the PPP printer of tcpdump
MEDIUM (6.2)
Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21.
Published: 2024-04-12T13:22:01.636Z
Updated: 2025-02-13T17:40:07.188Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1801 |
vulnerable | 2026-06-08 05:52:37.061918 |
Details available
The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.
Published: 2023-04-07T20:40:55.540Z
Updated: 2025-02-13T16:39:31.168Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8037 |
vulnerable | 2026-06-08 05:27:14.765658 |
ppp decapsulator can be convinced to allocate a large amount of memory
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
Published: 2020-11-04T17:55:21.657Z
Updated: 2024-09-16T20:27:55.571Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8036 |
vulnerable | 2026-06-08 05:27:14.763580 |
str2tokbuf used incorrectly by print-someip.c
The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.
Published: 2020-11-04T17:55:24.515Z
Updated: 2024-09-16T23:42:08.125Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16301 |
vulnerable | 2026-06-08 05:11:04.681713 |
Details available
The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.
Published: 2019-10-03T15:55:20.000Z
Updated: 2024-08-05T10:17:38.421Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.