WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product tcpdump✕
Overview 32 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 2 public PoC · 0 EPSS ≥ 0.5
32matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 2public PoC6.2% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 3.1% Not applicable 31 96.9% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 32 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 32 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 2 6.2% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 30 93.8%
split by peak 18 / year
Not applicable: 31Outside Waratek scope: 1 High: 32 not blocked: 32 No public exploit: 30Working exploit published: 2
20001 Not applicable1 High1 not blocked1 Working exploit published1 20012 Not applicable2 High2 not blocked2 Working exploit published1 No public exploit1 20022 Not applicable2 High2 not blocked2 No public exploit2 20030 20041 Not applicable1 High1 not blocked1 No public exploit1 20050 20060 20070 20080 20090 20100 20110 20120 20130 20140 20152 Not applicable2 High2 not blocked2 No public exploit2 20160 20173 Not applicable3 High3 not blocked3 No public exploit3 20180 201918 Outside Waratek scope1 Not applicable17 High18 not blocked18 No public exploit18 20202 Not applicable2 High2 not blocked2 No public exploit2 20210 20220 20230 20240 20250 20261 Not applicable1 High1 not blocked1 No public exploit1
200220052008201120142017202020232026
32 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-8658 High 2026-06-25 Not applicable No public exploit OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the options or filter parameters due to insufficient input sanitization in shell command construction.
CVE-2020-8037 High 2020-11-04 Not applicable No public exploit The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
CVE-2020-8036 High 2020-11-04 Not applicable No public exploit The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.
CVE-2019-15166 High 2019-10-03 Outside Waratek scope No public exploit lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
CVE-2018-16452 High 2019-10-03 Not applicable No public exploit The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.
CVE-2018-16301 High 2019-10-03 Not applicable No public exploit The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.
CVE-2018-16300 High 2019-10-03 Not applicable No public exploit The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion.
CVE-2018-16229 High 2019-10-03 Not applicable No public exploit The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().
CVE-2018-16227 High 2019-10-03 Not applicable No public exploit The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.
CVE-2018-14880 High 2019-10-03 Not applicable No public exploit The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
CVE-2018-14879 High 2019-10-03 Not applicable No public exploit The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
CVE-2018-14470 High 2019-10-03 Not applicable No public exploit The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().
CVE-2018-14469 High 2019-10-03 Not applicable No public exploit The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
CVE-2018-14468 High 2019-10-03 Not applicable No public exploit The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
CVE-2018-14467 High 2019-10-03 Not applicable No public exploit The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).
CVE-2018-14466 High 2019-10-03 Not applicable No public exploit The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().
CVE-2018-14465 High 2019-10-03 Not applicable No public exploit The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
CVE-2018-14464 High 2019-10-03 Not applicable No public exploit The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().
CVE-2018-14463 High 2019-10-03 Not applicable No public exploit The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.
CVE-2018-14462 High 2019-10-03 Not applicable No public exploit The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
CVE-2018-14461 High 2019-10-03 Not applicable No public exploit The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().
CVE-2015-3138 High 2017-09-28 Not applicable No public exploit print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).
CVE-2017-12989 High 2017-09-14 Not applicable No public exploit The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().
CVE-2017-11108 High 2017-07-08 Not applicable No public exploit tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.
CVE-2015-2155 High 2015-03-24 Not applicable No public exploit The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
CVE-2015-0261 High 2015-03-24 Not applicable No public exploit Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.
CVE-2003-0989 High 2004-02-17 Not applicable No public exploit tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.
CVE-2002-1350 High 2002-12-23 Not applicable No public exploit The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash).
CVE-2002-0380 High 2002-06-18 Not applicable No public exploit Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.
CVE-1999-1024 High 2001-11-28 Not applicable Working exploit published ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet.
CVE-2001-1279 High 2001-07-17 Not applicable No public exploit Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026.
CVE-2000-1026 High 2000-12-11 Not applicable Working exploit published Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.