Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how tcpdump compares to other vendors in security performance

View Risk Score →

libpcap 1.10.5 leased with two security fixes

https://seclists.org/tcpdump/2024/q3/3 announced: I hope this finds you well. tcpdump 4.99.5 and libpcap 1.10.5 are now available in the usual places [1]. It has been almost 1.5 years since the previous .4 releases, so this time it is many more bug fixes and improvements than usual. Among other things libpcap 1.10.5 addresses two CVEs that only apply if libpcap was built with the remote packet capture support (which is not the default). [...] 1: https://www.tcpdump.org/release/ https://www.tcpdump.org/index.html#latest-releases further says: This libpcap release makes various improvements and bug fixes available whilst the work on libpcap 1.11 is still in progress. Among other things this includes the fixes to two vulnerabilities (CVE-2023-7256 discovered by Dora Sweet and CVE-2024-8006 discovered by Flavio Toffalini and reported by Nicolas Badoux) in the remote packet capture code, which is disabled by default. -- -Alan Coopersmith- alan.coopersmith () oracle com Oracle Solaris Engineering - https://blogs.oracle.com/solaris

First published (updated )
https://seclists.org/oss-sec/2024/q3/253

tcpdump LibpcapNULL pointer dereference in libpcap before 1.10.5 with remote packet capture support

Risk 21
Severity
4.4
EPSS
0.04%
Null Pointer Dereference
AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support

1 / 2
Source: Microsoft

Remedy

Upgrade to libpcap 1.10.5.
First published (updated )
CVE-2024-8006

tcpdump LibpcapDouble-free in libpcap before 1.10.5 with remote packet capture support.

Risk 28
Severity
4.4
Double Free
AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Double-free in libpcap before 1.10.5 with remote packet capture support.

1 / 2
Source: Microsoft

Remedy

Upgrade to libpcap 1.10.5.
First published (updated )
CVE-2023-7256

tcpdump tcpdumpinfinite loop in the PPP printer of tcpdump

Risk 36
Severity
6.2
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLTPPPSERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21.

First published (updated )
CVE-2024-2397

Apple macOS Big SurInput Validation, Race Condition, Buffer Overflow, Use After Free, Integer Overflow

Risk 39
Severity
6.5
Input Validation, Race Condition, Buffer Overflow, Use After Free, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accounts. A privacy issue was addressed with improved private data redaction for log entries.

1 / 45
Source: Apple

Remedy

If using tcpdump 4.99.3, upgrade to 4.99.4.
First published (updated )
CVE-2023-1801

redhat/tcpsliceUse After Free

Risk 31
Severity
5.5
Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Tcpdump tcpslice is vulnerable to a denial of service, caused by a use-after-free flaw. By persuading a victim to open a specially-crafted file, a remote attacker could exploit this vulnerability to cause a segmentation fault, and results in a denial of service condition.

1 / 3
Source: IBM
First published (updated )
CVE-2021-41043

tcpdump tcpdumpstr2tokbuf used incorrectly by print-someip.c

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.

First published (updated )
CVE-2020-8036

Apple macOS Big Surppp decapsulator can be convinced to allocate a large amount of memory

Risk 44
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

tcpdump. This issue was addressed with improved checks.

1 / 2
First published (updated )
CVE-2020-8037

tcpdump tcpdumptcpdump vulnerabilities

Risk 23

USN-4252-1 fixed several vulnerabilities in tcpdump. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Multiple security issues were discovered in tcpdump. A remote attacker could use these issues to cause tcpdump to crash, resulting in a denial of service, or possibly execute arbitrary code.

First published (updated )
Advisory
USN-4252-2

Apple macOS CatalinaLast updated 25 August 2025

Risk 68
Severity
9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2019-15167

Apple tvOSLast updated 25 August 2025

Risk 28
Severity
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2019-15165

Apple tvOSSSRF

Risk 27
Severity
5.3
SSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

libpcap. Multiple issues were addressed by updating to libpcap version 1.9.1

1 / 4
First published (updated )
CVE-2019-15164

Apple tvOSNull Pointer Dereference

Risk 44
Severity
7.5
Null Pointer Dereference
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

libpcap. Multiple issues were addressed by updating to libpcap version 1.9.1

1 / 4
First published (updated )
CVE-2019-15163

Apple tvOSlibpcap. Multiple issues were addressed by updating to libpcap version 1.9.1

Risk 27
Severity
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

libpcap. Multiple issues were addressed by updating to libpcap version 1.9.1

1 / 4
First published (updated )
CVE-2019-15162

Apple tvOSlibpcap. Multiple issues were addressed by updating to libpcap version 1.9.1

Risk 27
Severity
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

libpcap. Multiple issues were addressed by updating to libpcap version 1.9.1

1 / 4
First published (updated )
CVE-2019-15161

Apple macOS Catalinalmp_print in tcpdump lacks certain boundary checks

Risk 45
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2019-15166

Apple macOS CatalinaLast updated 25 August 2025

Risk 45
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-16452

Apple macOS CatalinaLast updated 25 August 2025

Risk 88
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-16451

apple macOS CatalinaInteger Overflow, Buffer Overflow

Risk 69
Severity
7.8
Integer Overflow, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

tcpdump. Multiple issues were addressed by updating to tcpdump version 4.9.3 and libpcap version 1.9.1

1 / 2
First published (updated )
CVE-2018-16301

Apple macOS CatalinaLast updated 25 August 2025

Risk 45
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-16300

Apple macOS CatalinaLast updated 25 August 2025

Risk 88
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-16230

Apple macOS CatalinaLast updated 25 August 2025

Risk 45
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-16229

Apple macOS CatalinaLast updated 25 August 2025

Risk 88
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-16228

debian/tcpdumpLast updated 24 July 2024

Risk 45
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-16227

debian/tcpdumpLast updated 24 July 2024

Risk 88
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-14882

debian/tcpdumpLast updated 24 July 2024

Risk 88
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-14881

debian/tcpdumpLast updated 24 July 2024

Risk 45
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-14880

debian/tcpdumpBuffer Overflow

Risk 64
Severity
7
Buffer Overflow
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-14879

debian/tcpdumpLast updated 24 July 2024

Risk 45
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-14470

debian/tcpdumpLast updated 24 July 2024

Risk 45
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
CVE-2018-14469

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203