Skip to content

CVE-2002-0380

Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service...

7.5 HighFix available

CVE-2002-0380 is a high vulnerability (CVSS 7.5) in Lbl Tcpdump, published June 18, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.95%, the 92nd percentile. Fixed in tcpdump 3.7.1-1.2.

Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.

Exploit likelihood

4.95%Down 2.6 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.

Record: CVE-2002-0380
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.

Record: CVE-2002-0380
Updated: 2026-11-02

EUVDEUVD-2002-0377 No score

Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.

Record: EUVD-2002-0377
Updated: 2026-11-03

GitHub AdvisoriesGHSA-96qc-cv4m-j8fq No score

Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service...

Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.

Record: GHSA-96qc-cv4m-j8fq
Updated: 2026-11-02

OSV No score

Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.

Record: CVE-2002-0380
Updated: 2026-11-02

OSVDEBIAN-CVE-2002-0380 No score

Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.

Record: DEBIAN-CVE-2002-0380
Updated: 2026-11-02

Affected products

lbl tcpdump

Affected packages

Affected packages
Package	Affected	Fixed
`tcpdump` Debian:12	before 3.7.1-1.2	3.7.1-1.2
`tcpdump` Debian:13	before 3.7.1-1.2	3.7.1-1.2
`tcpdump` Debian:14	before 3.7.1-1.2	3.7.1-1.2
`tcpdump` Debian:3.0	before 3.6.2-2.3	3.6.2-2.3

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 7 moreShow less