Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

Multiple buffer overflows, and one integer overflow, in protocol decoding were found that may cause incorrect decoding, segmentation fault or (in the case of integer overflow) an infinite loop. These issues can be be exploited either locally, by making the target user decode a crafted .pcap file using tcpdump, or remotely by sending crafted packets to the network segment where the target system is running tcpdump decoding the live packet capture. Ability to send crafted packets to the target network segment is limited by the protocols' ability to cross network segments, or presence of firewall rules.

Upstream changelog:

http://www.tcpdump.org/tcpdump-changes.txt

pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding detection via crafted packets.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.

tcpdump. Multiple issues were addressed by updating to version 4.9.2.