Overview 181 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 3 public PoC · 2 EPSS ≥ 0.5
181matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
3public PoC1.7%
2EPSS ≥ 0.51.1%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
0.6%
Not applicable
180
99.4%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
181
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
3
1.7%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
178
98.3%
split by
peak 134 / year
20042
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
20050
20060
20072
Not applicable2
Critical1
Medium1
not blocked2
Working exploit published1
No public exploit1
20080
20090
20100
20110
20120
20130
20140
20154
Not applicable4
High2
Medium2
not blocked4
Working exploit published1
No public exploit3
20160
2017134
Not applicable134
Critical130
High3
Medium1
not blocked134
No public exploit134
20181
Not applicable1
Medium1
not blocked1
No public exploit1
201931
Outside Waratek scope1
Not applicable30
Critical7
High19
Medium4
Low1
not blocked31
No public exploit31
20202
Not applicable2
High2
not blocked2
No public exploit2
20210
20222
Not applicable2
Critical1
Medium1
not blocked2
No public exploit2
20231
Not applicable1
Medium1
not blocked1
No public exploit1
20242
Not applicable2
Medium2
not blocked2
No public exploit2
20042006200820102012201420162018202020222024
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2024-8006 | Medium | 2024-08-31 | Not applicable | No public exploit | Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex(). One of the function arguments can be a filesystem path, which normally means a directory with input data files. When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence. |
| CVE-2023-7256 | Medium | 2024-08-31 | Not applicable | No public exploit | In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function whether freeaddrinfo() still remains to be called after the function returns. This makes it possible in some scenarios that both the function and its caller call freeaddrinfo() for the same allocated memory block. A similar problem was reported in Apple libpcap, to which Apple assigned CVE-2023-40400. |
| CVE-2023-1801 | Medium | 2023-04-07 | Not applicable | No public exploit | The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet. |
| CVE-2019-15167 | Critical | 2022-08-27 | Not applicable | No public exploit | The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463. |
| CVE-2021-41043 | Medium | 2022-01-05 | Not applicable | No public exploit | Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact. |
| CVE-2020-8037 | High | 2020-11-04 | Not applicable | No public exploit | The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory. |
| CVE-2020-8036 | High | 2020-11-04 | Not applicable | No public exploit | The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way. |
| CVE-2019-15166 | High | 2019-10-03 | Outside Waratek scope | No public exploit | lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks. |
| CVE-2019-15165 | Medium | 2019-10-03 | Not applicable | No public exploit | sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory. |
| CVE-2019-15164 | Medium | 2019-10-03 | Not applicable | No public exploit | rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source. |
| CVE-2019-15163 | High | 2019-10-03 | Not applicable | No public exploit | rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daemon crash) if a crypt() call fails. |
| CVE-2019-15162 | Medium | 2019-10-03 | Not applicable | No public exploit | rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames. |
| CVE-2019-15161 | Medium | 2019-10-03 | Not applicable | No public exploit | rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request. |
| CVE-2018-16452 | High | 2019-10-03 | Not applicable | No public exploit | The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion. |
| CVE-2018-16451 | Critical | 2019-10-03 | Not applicable | No public exploit | The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN. |
| CVE-2018-16301 | High | 2019-10-03 | Not applicable | No public exploit | The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump. |
| CVE-2018-16300 | High | 2019-10-03 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion. |
| CVE-2018-16230 | Critical | 2019-10-03 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI). |
| CVE-2018-16229 | High | 2019-10-03 | Not applicable | No public exploit | The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option(). |
| CVE-2018-16228 | Critical | 2019-10-03 | Not applicable | No public exploit | The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix(). |
| CVE-2018-16227 | High | 2019-10-03 | Not applicable | No public exploit | The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield. |
| CVE-2018-14882 | Critical | 2019-10-03 | Not applicable | No public exploit | The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c. |
| CVE-2018-14881 | Critical | 2019-10-03 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART). |
| CVE-2018-14880 | High | 2019-10-03 | Not applicable | No public exploit | The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr(). |
| CVE-2018-14879 | High | 2019-10-03 | Not applicable | No public exploit | The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file(). |
| CVE-2018-14470 | High | 2019-10-03 | Not applicable | No public exploit | The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2(). |
| CVE-2018-14469 | High | 2019-10-03 | Not applicable | No public exploit | The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print(). |
| CVE-2018-14468 | High | 2019-10-03 | Not applicable | No public exploit | The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print(). |
| CVE-2018-14467 | High | 2019-10-03 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP). |
| CVE-2018-14466 | High | 2019-10-03 | Not applicable | No public exploit | The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert(). |
| CVE-2018-14465 | High | 2019-10-03 | Not applicable | No public exploit | The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
| CVE-2018-14464 | High | 2019-10-03 | Not applicable | No public exploit | The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs(). |
| CVE-2018-14463 | High | 2019-10-03 | Not applicable | No public exploit | The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167. |
| CVE-2018-14462 | High | 2019-10-03 | Not applicable | No public exploit | The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print(). |
| CVE-2018-14461 | High | 2019-10-03 | Not applicable | No public exploit | The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print(). |
| CVE-2018-10105 | Critical | 2019-10-03 | Not applicable | No public exploit | tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2). |
| CVE-2018-10103 | Critical | 2019-10-03 | Not applicable | No public exploit | tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2). |
| CVE-2019-1010220 | Low | 2019-07-22 | Not applicable | No public exploit | tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file. |
| CVE-2018-19519 | Medium | 2018-11-25 | Not applicable | No public exploit | In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization. |
| CVE-2017-16808 | Medium | 2017-11-13 | Not applicable | No public exploit | tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c. |
| CVE-2011-1935 | Critical | 2017-10-20 | Not applicable | No public exploit | pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding detection via crafted packets. |
| CVE-2015-3138 | High | 2017-09-28 | Not applicable | No public exploit | print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash). |
| CVE-2017-13725 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print(). |
| CVE-2017-13690 | Critical | 2017-09-14 | Not applicable | No public exploit | The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. |
| CVE-2017-13689 | Critical | 2017-09-14 | Not applicable | No public exploit | The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print(). |
| CVE-2017-13688 | Critical | 2017-09-14 | Not applicable | No public exploit | The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print(). |
| CVE-2017-13687 | Critical | 2017-09-14 | Not applicable | No public exploit | The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print(). |
| CVE-2017-13055 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv(). |
| CVE-2017-13054 | Critical | 2017-09-14 | Not applicable | No public exploit | The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print(). |
| CVE-2017-13053 | Critical | 2017-09-14 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info(). |
| CVE-2017-13052 | Critical | 2017-09-14 | Not applicable | No public exploit | The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print(). |
| CVE-2017-13051 | Critical | 2017-09-14 | Not applicable | No public exploit | The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
| CVE-2017-13050 | Critical | 2017-09-14 | Not applicable | No public exploit | The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print(). |
| CVE-2017-13049 | Critical | 2017-09-14 | Not applicable | No public exploit | The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print(). |
| CVE-2017-13048 | Critical | 2017-09-14 | Not applicable | No public exploit | The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
| CVE-2017-13047 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print(). |
| CVE-2017-13046 | Critical | 2017-09-14 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). |
| CVE-2017-13045 | Critical | 2017-09-14 | Not applicable | No public exploit | The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print(). |
| CVE-2017-13044 | Critical | 2017-09-14 | Not applicable | No public exploit | The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print(). |
| CVE-2017-13043 | Critical | 2017-09-14 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn(). |
| CVE-2017-13042 | Critical | 2017-09-14 | Not applicable | No public exploit | The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print(). |
| CVE-2017-13041 | Critical | 2017-09-14 | Not applicable | No public exploit | The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print(). |
| CVE-2017-13040 | Critical | 2017-09-14 | Not applicable | No public exploit | The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions. |
| CVE-2017-13039 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. |
| CVE-2017-13038 | Critical | 2017-09-14 | Not applicable | No public exploit | The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp(). |
| CVE-2017-13037 | Critical | 2017-09-14 | Not applicable | No public exploit | The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts(). |
| CVE-2017-13036 | Critical | 2017-09-14 | Not applicable | No public exploit | The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3(). |
| CVE-2017-13035 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id(). |
| CVE-2017-13034 | Critical | 2017-09-14 | Not applicable | No public exploit | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). |
| CVE-2017-13033 | Critical | 2017-09-14 | Not applicable | No public exploit | The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print(). |
| CVE-2017-13032 | Critical | 2017-09-14 | Not applicable | No public exploit | The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string(). |
| CVE-2017-13031 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print(). |
| CVE-2017-13030 | Critical | 2017-09-14 | Not applicable | No public exploit | The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions. |
| CVE-2017-13029 | Critical | 2017-09-14 | Not applicable | No public exploit | The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options(). |
| CVE-2017-13028 | Critical | 2017-09-14 | Not applicable | No public exploit | The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print(). |
| CVE-2017-13027 | Critical | 2017-09-14 | Not applicable | No public exploit | The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print(). |
| CVE-2017-13026 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions. |
| CVE-2017-13025 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). |
| CVE-2017-13024 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). |
| CVE-2017-13023 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). |
| CVE-2017-13022 | Critical | 2017-09-14 | Not applicable | No public exploit | The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute(). |
| CVE-2017-13021 | Critical | 2017-09-14 | Not applicable | No public exploit | The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print(). |
| CVE-2017-13020 | Critical | 2017-09-14 | Not applicable | No public exploit | The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print(). |
| CVE-2017-13019 | Critical | 2017-09-14 | Not applicable | No public exploit | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). |
| CVE-2017-13018 | Critical | 2017-09-14 | Not applicable | No public exploit | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). |
| CVE-2017-13017 | Critical | 2017-09-14 | Not applicable | No public exploit | The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print(). |
| CVE-2017-13016 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print(). |
| CVE-2017-13015 | Critical | 2017-09-14 | Not applicable | No public exploit | The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print(). |
| CVE-2017-13014 | Critical | 2017-09-14 | Not applicable | No public exploit | The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions. |
| CVE-2017-13013 | Critical | 2017-09-14 | Not applicable | No public exploit | The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions. |
| CVE-2017-13012 | Critical | 2017-09-14 | Not applicable | No public exploit | The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print(). |
| CVE-2017-13011 | Critical | 2017-09-14 | Not applicable | No public exploit | Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal(). |
| CVE-2017-13010 | Critical | 2017-09-14 | Not applicable | No public exploit | The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart(). |
| CVE-2017-13009 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print(). |
| CVE-2017-13008 | Critical | 2017-09-14 | Not applicable | No public exploit | The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements(). |
| CVE-2017-13007 | Critical | 2017-09-14 | Not applicable | No public exploit | The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print(). |
| CVE-2017-13006 | Critical | 2017-09-14 | Not applicable | No public exploit | The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions. |
| CVE-2017-13005 | Critical | 2017-09-14 | Not applicable | No public exploit | The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter(). |
| CVE-2017-13004 | Critical | 2017-09-14 | Not applicable | No public exploit | The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header(). |
| CVE-2017-13003 | Critical | 2017-09-14 | Not applicable | No public exploit | The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print(). |