CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.27)
The ISO ES-IS parser in tcpdump before version 4.9.2 has a buffer over-read in the esis_print() function.
The EAP parser in tcpdump before version 4.9.2 has a buffer over-read issue in the eap_print() function.
The White Board protocol parser in tcpdump before version 4.9.2 has a buffer over-read in the wb_prep() function and several other functions.
The ARP parser in tcpdump before version 4.9.2 has a buffer over-read in print-arp.c in several functions.
The ICMP parser in tcpdump before version 4.9.2 has a buffer over-read in the icmp_print() function.
Several protocol parsers in tcpdump before version 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal().
The BEEP parser in tcpdump before version 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().
The IPv6 mobility parser in tcpdump before version 4.9.2 has a buffer over-read in the mobility_print() function in print-mobility.c.
The IEEE 802.11 parser in tcpdump before version 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
The PKTAP parser in tcpdump before version 4.9.2 has a buffer over-read in the pktap_if_print() function.
The L2TP parser in tcpdump before version 4.9.2 has a buffer over-read in print-l2tp.c in several functions.
The NFS parser in tcpdump before version 4.9.2 has a buffer over-read in the function print-nfs.c:xid_map_enter().
The Juniper protocols parser in tcpdump before version 4.9.2 has a buffer over-read in the juniper_parse_header() function.
The LMP parser in tcpdump before version 4.9.2 has a buffer over-read in the lmp_print() function.
The AODV parser in tcpdump before version 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().
The NFS parser in tcpdump before version 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().
The IEEE 802.15.4 parser in tcpdump before version 4.9.2 has a buffer over-read in the ieee802_15_4_if_print() function.
The IS-IS parser in tcpdump before version 4.9.2 has a buffer over-read in the isis_print() function.
The IS-IS parser in tcpdump before version 4.9.2 has a buffer over-read in the function isis_print_extd_ip_reach().
The LLDP parser in tcpdump before version 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().