https://vulnogram.org/ Most recent CVEs assigned by Tcpdump Group (tcpdump). https://vulnogram.org/seaview/icons/tcpdump.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-18238 https://vulnogram.org/CVE-2026-18238 The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond… Medium Sat, 05 Sep 2026 18:51:57 GMT https://vulnogram.org/CVE-2026-18313 https://vulnogram.org/CVE-2026-18313 rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to… Medium Sat, 05 Sep 2026 18:51:32 GMT https://vulnogram.org/CVE-2026-6554 https://vulnogram.org/CVE-2026-6554 libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can ca… Medium Sat, 05 Sep 2026 18:51:02 GMT https://vulnogram.org/CVE-2026-6244 https://vulnogram.org/CVE-2026-6244 libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero. Medium Sat, 05 Sep 2026 18:50:39 GMT https://vulnogram.org/CVE-2026-31911 https://vulnogram.org/CVE-2026-31911 libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process. Medium Sat, 05 Sep 2026 18:50:03 GMT https://vulnogram.org/CVE-2026-31912 https://vulnogram.org/CVE-2026-31912 libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use c… Medium Sat, 05 Sep 2026 18:49:41 GMT https://vulnogram.org/CVE-2026-0799 https://vulnogram.org/CVE-2026-0799 In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted… High Sat, 05 Sep 2026 18:48:39 GMT https://vulnogram.org/CVE-2025-11964 https://vulnogram.org/CVE-2025-11964 On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the end of the provided buffer. Low Wed, 31 Dec 2025 00:58:19 GMT https://vulnogram.org/CVE-2025-11961 https://vulnogram.org/CVE-2025-11961 pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorl… Low Wed, 31 Dec 2025 00:56:16 GMT https://vulnogram.org/CVE-2024-8006 https://vulnogram.org/CVE-2024-8006 Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex(). One of the function arguments can be a filesy… Medium Fri, 30 Aug 2024 23:53:11 GMT https://vulnogram.org/CVE-2023-7256 https://vulnogram.org/CVE-2023-7256 In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function whether freeaddrinfo() still remai… Medium Fri, 30 Aug 2024 23:44:04 GMT https://vulnogram.org/CVE-2024-2397 https://vulnogram.org/CVE-2024-2397 Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile. This problem does not affect any tcpdump release, but it affected the git master branch from 2… Medium Fri, 12 Apr 2024 13:22:01 GMT https://vulnogram.org/CVE-2023-1801 https://vulnogram.org/CVE-2023-1801 The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet. Fri, 07 Apr 2023 20:40:55 GMT https://vulnogram.org/CVE-2021-41043 https://vulnogram.org/CVE-2021-41043 Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact. Wed, 05 Jan 2022 11:34:51 GMT https://vulnogram.org/CVE-2020-8036 https://vulnogram.org/CVE-2020-8036 The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way. Wed, 04 Nov 2020 17:55:24 GMT https://vulnogram.org/CVE-2020-8037 https://vulnogram.org/CVE-2020-8037 The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory. Wed, 04 Nov 2020 17:55:21 GMT https://vulnogram.org/CVE-2018-16301 https://vulnogram.org/CVE-2018-16301 The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the… Thu, 03 Oct 2019 15:55:20 GMT