Overview 24 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 10 public PoC · 1 EPSS ≥ 0.5
24matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
10public PoC41.7%
1EPSS ≥ 0.54.2%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
24
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
24
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
10
41.7%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
14
58.3%
split by
peak 5 / year
19991
Not applicable1
Medium1
not blocked1
Working exploit published1
20000
20010
20020
20034
Not applicable4
Medium4
not blocked4
Working exploit published1
No public exploit3
20045
Not applicable5
Medium5
not blocked5
Working exploit published2
No public exploit3
20054
Not applicable4
Medium4
not blocked4
Working exploit published4
20060
20071
Not applicable1
Medium1
not blocked1
No public exploit1
20080
20090
20100
20110
20120
20130
20144
Not applicable4
Medium4
not blocked4
Working exploit published1
No public exploit3
20152
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
20160
20171
Not applicable1
Medium1
not blocked1
No public exploit1
20181
Not applicable1
Medium1
not blocked1
No public exploit1
20190
20200
20210
20220
20231
Not applicable1
Medium1
not blocked1
No public exploit1
1999200120032005200720092011201320152017201920212023
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2023-1801 | Medium | 2023-04-07 | Not applicable | No public exploit | The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet. |
| CVE-2018-19519 | Medium | 2018-11-25 | Not applicable | No public exploit | In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization. |
| CVE-2017-16808 | Medium | 2017-11-13 | Not applicable | No public exploit | tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c. |
| CVE-2015-2154 | Medium | 2015-03-24 | Not applicable | No public exploit | The osi_print_cksum function in print-isoclns.c in the ethernet printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) length, (2) offset, or (3) base pointer checksum value. |
| CVE-2015-2153 | Medium | 2015-03-24 | Not applicable | Working exploit published | The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via a crafted header length in an RPKI-RTR Protocol Data Unit (PDU). |
| CVE-2014-9140 | Medium | 2014-12-05 | Not applicable | No public exploit | Buffer overflow in the ppp_hdlc function in print-ppp.c in tcpdump 4.6.2 and earlier allows remote attackers to cause a denial of service (crash) cia a crafted PPP packet. |
| CVE-2014-8769 | Medium | 2014-11-20 | Not applicable | No public exploit | tcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand Distance Vector (AODV) packet, which triggers an out-of-bounds memory access. |
| CVE-2014-8768 | Medium | 2014-11-20 | Not applicable | Working exploit published | Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame. |
| CVE-2014-8767 | Medium | 2014-11-20 | Not applicable | No public exploit | Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame. |
| CVE-2007-1218 | Medium | 2007-03-02 | Not applicable | No public exploit | Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based. |
| CVE-2005-1267 | Medium | 2005-06-10 | Not applicable | Working exploit published | The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet. |
| CVE-2005-1280 | Medium | 2005-05-02 | Not applicable | Working exploit published | The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4. |
| CVE-2005-1279 | Medium | 2005-05-02 | Not applicable | Working exploit published | tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function. |
| CVE-2005-1278 | Medium | 2005-05-02 | Not applicable | Working exploit published | The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet. |
| CVE-2004-0184 | Medium | 2004-05-04 | Not applicable | Working exploit published | Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite. |
| CVE-2004-0183 | Medium | 2004-05-04 | Not applicable | No public exploit | TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite. |
| CVE-2004-0057 | Medium | 2004-02-17 | Not applicable | No public exploit | The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989. |
| CVE-2004-0055 | Medium | 2004-02-17 | Not applicable | No public exploit | The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value. |
| CVE-2003-1029 | Medium | 2004-02-17 | Not applicable | Working exploit published | The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets. |
| CVE-2003-0194 | Medium | 2003-06-09 | Not applicable | No public exploit | tcpdump does not properly drop privileges to the pcap user when starting up. |
| CVE-2003-0145 | Medium | 2003-03-31 | Not applicable | No public exploit | Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," allows remote attackers to cause a denial of service (infinite loop), a different vulnerability than CAN-2003-0093. |
| CVE-2003-0108 | Medium | 2003-03-07 | Not applicable | Working exploit published | isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop. |
| CVE-2003-0093 | Medium | 2003-03-03 | Not applicable | No public exploit | The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service (crash) via an invalid RADIUS packet with a header length field of 0, which causes tcpdump to generate data within an infinite loop. |
| CVE-2000-0333 | Medium | 1999-05-31 | Not applicable | Working exploit published | tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet. |