CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.29)
The OTV parser in tcpdump before version 4.9.0 has a buffer overflow in the otv_print() function.
The ISAKMP parser in tcpdump before version 4.9.0 has a buffer overflow in the ikev2_e_print() function in print-isakmp.c.
The IPv6 parser in tcpdump before version 4.9.0 has a buffer overflow in the ip6_print() function in print-ip6.c.
The BOOTP parser in tcpdump before version 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().
The ISO CLNS parser in tcpdump before version 4.9.0 has a buffer overflow in the clnp_print() function in print-isoclns.c.
The Q.933 parser in tcpdump before version 4.9.0 has a buffer overflow in print-fr.c:q933_print(), which is a different vulnerability than CVE-2017-5482.
The FRF.15 parser in tcpdump before version 4.9.0 has a buffer overflow in print-fr.c:frf15_print().
A bug in util-print.c:relts_print() in tcpdump before version 4.9.0 could lead to a buffer overflow in multiple protocol parsers, including DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, and PIM.
The Classical IP over ATM parser in tcpdump before version 4.9.0 has a buffer overflow in the cip_if_print() function in print-cip.c.
The GeoNetworking parser in tcpdump before version 4.9.0 has a buffer overflow in print-geonet.c in multiple functions.
The CALM FAST parser in tcpdump before version 4.9.0 has a buffer overflow in the calm_fast_print() function.
The TFTP parser in tcpdump before version 4.9.0 has a buffer overflow in print-tftp.c:tftp_print().
The BOOTP parser in tcpdump before version 4.9.0 has a buffer overflow in the bootp_print() function.
The TCP parser in tcpdump before version 4.9.0 has a buffer overflow in the tcp_print() function in print-tcp.c.
The IP parser in tcpdump before version 4.9.0 has a buffer overflow in print-ip.c, in multiple functions.
The AppleTalk parser in tcpdump before version 4.9.0 has a buffer overflow in print-atalk.c in multiple functions.
The STP parser in tcpdump before version 4.9.0 has a buffer overflow in print-stp.c in multiple functions.
The GRE parser in tcpdump before version 4.9.0 has a buffer overflow in print-gre.c in multiple functions.
The ZeroMQ parser in tcpdump before version 4.9.0 has an integer overflow in the zmtp1_print_frame() function.
The VAT parser in tcpdump before version 4.9.0 has a buffer overflow in the vat_print() function in print-udp.c.