Overview 182 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
182matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
0public PoC0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
0.5%
Not applicable
181
99.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
182
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
182
100.0%
split by
peak 133 / year
20011
Not applicable1
High1
not blocked1
No public exploit1
20022
Not applicable2
High2
not blocked2
No public exploit2
20033
Not applicable3
Medium3
not blocked3
No public exploit3
20044
Not applicable4
High1
Medium3
not blocked4
No public exploit4
20050
20060
20071
Not applicable1
Medium1
not blocked1
No public exploit1
20080
20090
20100
20110
20120
20130
20143
Not applicable3
Medium3
not blocked3
No public exploit3
20153
Not applicable3
High2
Medium1
not blocked3
No public exploit3
20160
2017133
Not applicable133
Critical129
High3
Medium1
not blocked133
No public exploit133
20181
Not applicable1
Medium1
not blocked1
No public exploit1
201926
Outside Waratek scope1
Not applicable25
Critical7
High18
Low1
not blocked26
No public exploit26
20202
Not applicable2
High2
not blocked2
No public exploit2
20210
20221
Not applicable1
Critical1
not blocked1
No public exploit1
20231
Not applicable1
Medium1
not blocked1
No public exploit1
20240
20250
20261
Not applicable1
High1
not blocked1
No public exploit1
200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-8658 | High | 2026-06-25 | Not applicable | No public exploit | OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the options or filter parameters due to insufficient input sanitization in shell command construction. |
| CVE-2023-1801 | Medium | 2023-04-07 | Not applicable | No public exploit | The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet. |
| CVE-2019-15167 | Critical | 2022-08-27 | Not applicable | No public exploit | The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463. |
| CVE-2020-8037 | High | 2020-11-04 | Not applicable | No public exploit | The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory. |
| CVE-2020-8036 | High | 2020-11-04 | Not applicable | No public exploit | The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way. |
| CVE-2019-15166 | High | 2019-10-03 | Outside Waratek scope | No public exploit | lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks. |
| CVE-2018-16452 | High | 2019-10-03 | Not applicable | No public exploit | The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion. |
| CVE-2018-16451 | Critical | 2019-10-03 | Not applicable | No public exploit | The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN. |
| CVE-2018-16301 | High | 2019-10-03 | Not applicable | No public exploit | The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump. |
| CVE-2018-16300 | High | 2019-10-03 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion. |
| CVE-2018-16230 | Critical | 2019-10-03 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI). |
| CVE-2018-16229 | High | 2019-10-03 | Not applicable | No public exploit | The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option(). |
| CVE-2018-16228 | Critical | 2019-10-03 | Not applicable | No public exploit | The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix(). |
| CVE-2018-16227 | High | 2019-10-03 | Not applicable | No public exploit | The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield. |
| CVE-2018-14882 | Critical | 2019-10-03 | Not applicable | No public exploit | The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c. |
| CVE-2018-14881 | Critical | 2019-10-03 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART). |
| CVE-2018-14880 | High | 2019-10-03 | Not applicable | No public exploit | The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr(). |
| CVE-2018-14879 | High | 2019-10-03 | Not applicable | No public exploit | The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file(). |
| CVE-2018-14470 | High | 2019-10-03 | Not applicable | No public exploit | The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2(). |
| CVE-2018-14469 | High | 2019-10-03 | Not applicable | No public exploit | The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print(). |
| CVE-2018-14468 | High | 2019-10-03 | Not applicable | No public exploit | The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print(). |
| CVE-2018-14467 | High | 2019-10-03 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP). |
| CVE-2018-14466 | High | 2019-10-03 | Not applicable | No public exploit | The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert(). |
| CVE-2018-14465 | High | 2019-10-03 | Not applicable | No public exploit | The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
| CVE-2018-14464 | High | 2019-10-03 | Not applicable | No public exploit | The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs(). |
| CVE-2018-14463 | High | 2019-10-03 | Not applicable | No public exploit | The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167. |
| CVE-2018-14462 | High | 2019-10-03 | Not applicable | No public exploit | The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print(). |
| CVE-2018-14461 | High | 2019-10-03 | Not applicable | No public exploit | The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print(). |
| CVE-2018-10105 | Critical | 2019-10-03 | Not applicable | No public exploit | tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2). |
| CVE-2018-10103 | Critical | 2019-10-03 | Not applicable | No public exploit | tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2). |
| CVE-2019-1010220 | Low | 2019-07-22 | Not applicable | No public exploit | tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file. |
| CVE-2018-19519 | Medium | 2018-11-25 | Not applicable | No public exploit | In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization. |
| CVE-2017-16808 | Medium | 2017-11-13 | Not applicable | No public exploit | tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c. |
| CVE-2015-3138 | High | 2017-09-28 | Not applicable | No public exploit | print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash). |
| CVE-2017-13725 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print(). |
| CVE-2017-13690 | Critical | 2017-09-14 | Not applicable | No public exploit | The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. |
| CVE-2017-13689 | Critical | 2017-09-14 | Not applicable | No public exploit | The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print(). |
| CVE-2017-13688 | Critical | 2017-09-14 | Not applicable | No public exploit | The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print(). |
| CVE-2017-13687 | Critical | 2017-09-14 | Not applicable | No public exploit | The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print(). |
| CVE-2017-13055 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv(). |
| CVE-2017-13054 | Critical | 2017-09-14 | Not applicable | No public exploit | The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print(). |
| CVE-2017-13053 | Critical | 2017-09-14 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info(). |
| CVE-2017-13052 | Critical | 2017-09-14 | Not applicable | No public exploit | The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print(). |
| CVE-2017-13051 | Critical | 2017-09-14 | Not applicable | No public exploit | The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
| CVE-2017-13050 | Critical | 2017-09-14 | Not applicable | No public exploit | The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print(). |
| CVE-2017-13049 | Critical | 2017-09-14 | Not applicable | No public exploit | The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print(). |
| CVE-2017-13048 | Critical | 2017-09-14 | Not applicable | No public exploit | The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
| CVE-2017-13047 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print(). |
| CVE-2017-13046 | Critical | 2017-09-14 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). |
| CVE-2017-13045 | Critical | 2017-09-14 | Not applicable | No public exploit | The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print(). |
| CVE-2017-13044 | Critical | 2017-09-14 | Not applicable | No public exploit | The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print(). |
| CVE-2017-13043 | Critical | 2017-09-14 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn(). |
| CVE-2017-13042 | Critical | 2017-09-14 | Not applicable | No public exploit | The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print(). |
| CVE-2017-13041 | Critical | 2017-09-14 | Not applicable | No public exploit | The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print(). |
| CVE-2017-13040 | Critical | 2017-09-14 | Not applicable | No public exploit | The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions. |
| CVE-2017-13039 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. |
| CVE-2017-13038 | Critical | 2017-09-14 | Not applicable | No public exploit | The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp(). |
| CVE-2017-13037 | Critical | 2017-09-14 | Not applicable | No public exploit | The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts(). |
| CVE-2017-13036 | Critical | 2017-09-14 | Not applicable | No public exploit | The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3(). |
| CVE-2017-13035 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id(). |
| CVE-2017-13034 | Critical | 2017-09-14 | Not applicable | No public exploit | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). |
| CVE-2017-13033 | Critical | 2017-09-14 | Not applicable | No public exploit | The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print(). |
| CVE-2017-13032 | Critical | 2017-09-14 | Not applicable | No public exploit | The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string(). |
| CVE-2017-13031 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print(). |
| CVE-2017-13030 | Critical | 2017-09-14 | Not applicable | No public exploit | The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions. |
| CVE-2017-13029 | Critical | 2017-09-14 | Not applicable | No public exploit | The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options(). |
| CVE-2017-13028 | Critical | 2017-09-14 | Not applicable | No public exploit | The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print(). |
| CVE-2017-13027 | Critical | 2017-09-14 | Not applicable | No public exploit | The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print(). |
| CVE-2017-13026 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions. |
| CVE-2017-13025 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). |
| CVE-2017-13024 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). |
| CVE-2017-13023 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). |
| CVE-2017-13022 | Critical | 2017-09-14 | Not applicable | No public exploit | The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute(). |
| CVE-2017-13021 | Critical | 2017-09-14 | Not applicable | No public exploit | The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print(). |
| CVE-2017-13020 | Critical | 2017-09-14 | Not applicable | No public exploit | The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print(). |
| CVE-2017-13019 | Critical | 2017-09-14 | Not applicable | No public exploit | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). |
| CVE-2017-13018 | Critical | 2017-09-14 | Not applicable | No public exploit | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). |
| CVE-2017-13017 | Critical | 2017-09-14 | Not applicable | No public exploit | The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print(). |
| CVE-2017-13016 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print(). |
| CVE-2017-13015 | Critical | 2017-09-14 | Not applicable | No public exploit | The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print(). |
| CVE-2017-13014 | Critical | 2017-09-14 | Not applicable | No public exploit | The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions. |
| CVE-2017-13013 | Critical | 2017-09-14 | Not applicable | No public exploit | The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions. |
| CVE-2017-13012 | Critical | 2017-09-14 | Not applicable | No public exploit | The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print(). |
| CVE-2017-13011 | Critical | 2017-09-14 | Not applicable | No public exploit | Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal(). |
| CVE-2017-13010 | Critical | 2017-09-14 | Not applicable | No public exploit | The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart(). |
| CVE-2017-13009 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print(). |
| CVE-2017-13008 | Critical | 2017-09-14 | Not applicable | No public exploit | The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements(). |
| CVE-2017-13007 | Critical | 2017-09-14 | Not applicable | No public exploit | The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print(). |
| CVE-2017-13006 | Critical | 2017-09-14 | Not applicable | No public exploit | The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions. |
| CVE-2017-13005 | Critical | 2017-09-14 | Not applicable | No public exploit | The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter(). |
| CVE-2017-13004 | Critical | 2017-09-14 | Not applicable | No public exploit | The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header(). |
| CVE-2017-13003 | Critical | 2017-09-14 | Not applicable | No public exploit | The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print(). |
| CVE-2017-13002 | Critical | 2017-09-14 | Not applicable | No public exploit | The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension(). |
| CVE-2017-13001 | Critical | 2017-09-14 | Not applicable | No public exploit | The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh(). |
| CVE-2017-13000 | Critical | 2017-09-14 | Not applicable | No public exploit | The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print(). |
| CVE-2017-12999 | Critical | 2017-09-14 | Not applicable | No public exploit | The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print(). |
| CVE-2017-12998 | Critical | 2017-09-14 | Not applicable | No public exploit | The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach(). |
| CVE-2017-12997 | Critical | 2017-09-14 | Not applicable | No public exploit | The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print(). |
| CVE-2017-12996 | Critical | 2017-09-14 | Not applicable | No public exploit | The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print(). |
| CVE-2017-12995 | Critical | 2017-09-14 | Not applicable | No public exploit | The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print(). |