Priority LOW 38
The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packe…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.13502 · Published 2005-06-20 · Fixed
Priority LOW 35
The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.10187 · Published 2005-04-26 · Fixed
Priority MEDIUM 41
tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly hand…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.18721 · Published 2005-04-26 · Fixed
Priority LOW 36
The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.10796 · Published 2005-04-26 · Fixed
Priority LOW 27
Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," allows remote attackers to cause a denial of service (infinite loop), a different vulnerability than C…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01898 · Published 2004-09-01 · Fixed
Priority LOW 36
isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.11342 · Published 2004-09-01 · Fixed
Priority LOW 27
The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service (crash) via an invalid RADIUS packet with a header length field of 0, which causes tcpdump to generate data within an i…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01972 · Published 2004-09-01 · Fixed
Priority LOW 37
The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash).
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02367 · Published 2004-09-01 · Fixed
Priority MEDIUM 41
Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0495 · Published 2004-09-01 · Fixed
Priority MEDIUM 40
Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signe…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04784 · Published 2004-09-01 · Fixed
Priority LOW 31
The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause inval…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05275 · Published 2004-01-15 · Fixed
Priority LOW 29
The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03629 · Published 2004-01-15 · Fixed
Priority LOW 35
The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_pri…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0992 · Published 2004-01-15 · No fix listed
Priority LOW 38
ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02912 · Published 2001-09-12 · No fix listed
Priority MEDIUM 52
Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05979 · Published 2001-01-22 · No fix listed
Priority LOW 34
Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.01179 · Published 2001-01-22 · No fix listed
Priority LOW 33
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while de…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.07576 · Published 2000-05-18 · No fix listed