tcpdump vulnerabilities

The print-wb.c file in tcpdump before version 4.7.4 contains a vulnerability that allows remote attackers to cause a denial of service through a segmentation fault and process crash.

The RESP parser in tcpdump before version 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().

tcpdump version 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.

A vulnerability in tcpdump before version 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.

The IPv6 routing header parser in tcpdump before version 4.9.2 has a buffer over-read in the rt6_print() function.

The IKEv2 parser in tcpdump before version 4.9.2 has a buffer over-read in print-isakmp.c in several functions.

The IKEv1 parser in tcpdump before version 4.9.2 has a buffer over-read in the ikev1_id_print() function.

The OLSR parser in tcpdump before version 4.9.2 has a buffer over-read in the olsr_print() function.

The HDLC parser in tcpdump before version 4.9.2 has a buffer over-read in the chdlc_print() function.

The ISO IS-IS parser in tcpdump before version 4.9.2 has a buffer over-read in the function isis_print_is_reach_subtlv().

The LLDP parser in tcpdump before version 4.9.2 has a buffer over-read in the lldp_private_8023_print() function.

The BGP parser in tcpdump before version 4.9.2 has a buffer over-read in the decode_rt_routing_info() function.

The CFM parser in tcpdump before version 4.9.2 has a buffer over-read in the cfm_print() function.

The RSVP parser in tcpdump before version 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().

The RPKI-Router parser in tcpdump before version 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().

The Rx protocol parser in tcpdump before version 4.9.2 has a buffer over-read in print-rx.c:ubik_print().

The RSVP parser in tcpdump before version 4.9.2 has a buffer over-read in the rsvp_obj_print() function.

The ISO ES-IS parser in tcpdump before version 4.9.2 has a buffer over-read in the esis_print() function.

The BGP parser in tcpdump before version 4.9.2 has a buffer over-read in the function print-bgp.c:bgp_attr_print().

The VQP parser in tcpdump before version 4.9.2 has a buffer over-read in the function print-vqp.c:vqp_print().

The HNCP parser in tcpdump before version 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().

The BGP parser in tcpdump before version 4.9.2 has a buffer over-read in the decode_multicast_vpn() function.

The HNCP parser in tcpdump before version 4.9.2 has a buffer over-read in the dhcpv6_print() function.

The ICMPv6 parser in tcpdump before version 4.9.2 has a buffer over-read in the icmp6_nodeinfo_print() function.

The MPTCP parser in tcpdump before version 4.9.2 has a buffer over-read in print-mptcp.c in several functions.

The ISAKMP parser in tcpdump before version 4.9.2 has a buffer over-read in print-isakmp.c in several functions.

The PPP parser in tcpdump before version 4.9.2 has a buffer over-read in the handle_mlppp() function.

The IP parser in tcpdump before version 4.9.2 has a buffer over-read in print-ip.c:ip_printts().

The OSPFv3 parser in tcpdump before version 4.9.2 has a buffer over-read in the function ospf6_decode_v3().

The ISO IS-IS parser in tcpdump before version 4.9.2 has a buffer over-read in the isis_print_id() function.

The PGM parser in tcpdump before version 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().

The VTP parser in tcpdump before version 4.9.2 has a buffer over-read in the vtp_print() function.

The RADIUS parser in tcpdump before version 4.9.2 has a buffer over-read in the print_attr_string() function.

The IPv6 fragmentation header parser in tcpdump before version 4.9.2 has a buffer over-read in the frag6_print() function.

The PIM parser in tcpdump before version 4.9.2 has a buffer over-read in print-pim.c in several functions.

The PPP parser in tcpdump before version 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().

The BOOTP parser in tcpdump before version 4.9.2 has a buffer over-read in the bootp_print() function.

The LLDP parser in tcpdump before version 4.9.2 has a buffer over-read in the lldp_mgmt_addr_tlv_print() function.

The ISO IS-IS parser in tcpdump before version 4.9.2 has a buffer over-read in print-isoclns.c in several functions.

The IPv6 mobility parser in tcpdump before version 4.9.2 has a buffer over-read in the mobility_opt_print() function.

The IPv6 mobility parser in tcpdump before version 4.9.2 has a buffer over-read in the mobility_opt_print() function.

The IPv6 mobility parser in tcpdump before version 4.9.2 has a buffer over-read in the mobility_opt_print() function.

The IP parser in tcpdump before version 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().

The ICMPv6 parser in tcpdump before version 4.9.2 has a buffer over-read in the icmp6_print() function.

The VTP parser in tcpdump before version 4.9.2 has a buffer over-read in the vtp_print() function.

The PGM parser in tcpdump before version 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().

The PGM parser in tcpdump before version 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().

The DHCPv6 parser in tcpdump before version 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().

The ISO ES-IS parser in tcpdump before version 4.9.2 has a buffer over-read in the esis_print() function.