Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLTPPPSERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2023-06-05 to 2024-03-21.
tcpdump. This issue was addressed with improved checks.
Last updated 25 August 2025
Last updated 25 August 2025
Last updated 25 August 2025
Last updated 25 August 2025
Last updated 25 August 2025
Last updated 25 August 2025
Last updated 25 August 2025
Last updated 25 August 2025
Last updated 24 July 2024
Last updated 25 August 2025
In tcpdump 4.9.2, a stack-based buffer over-read exists in the printprefix function of print-hncp.c via crafted packet data because of missing initialization.
Last updated 24 July 2024
tcpdump. Multiple issues were addressed by updating to version 4.9.2.
tcpdump. Multiple issues were addressed by updating to version 4.9.2.
Multiple buffer overflows, and one integer overflow, in protocol decoding were found that may cause incorrect decoding, segmentation fault or (in the case of integer overflow) an infinite loop. These issues can be be exploited either locally, by making the target user decode a crafted .pcap file using tcpdump, or remotely by sending crafted packets to the network segment where the target system is running tcpdump decoding the live packet capture. Ability to send crafted packets to the target network segment is limited by the protocols' ability to cross network segments, or presence of firewall rules.
Upstream changelog:
http://www.tcpdump.org/tcpdump-changes.txt
The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oamprint().
The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mplsprint().
The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse().
The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933print(), a different vulnerability than CVE-2017-5482.
The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otvprint().
The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sigprint().
The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-80211.c:ieee80211radioprint().
The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2checkchecksum().
The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertypeprint().
The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint().
The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootpprint().
The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookupnsap().
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe().