{"id":"CVE-2018-16301","aliases":["ALPINE-CVE-2018-16301","AZL-8506","BELL-CVE-2018-16301","DEBIAN-CVE-2018-16301","EUVD-2018-8152","GHSA-h8wh-rj39-x373","MGASA-2019-0297","OESA-2022-1862","OESA-2022-1863","SUSE-SU-2019:14191-1","SUSE-SU-2019:2669-1","SUSE-SU-2019:2673-1","SUSE-SU-2019:2674-1","SUSE-SU-2020:3360-1","SUSE-SU-2022:0505-1","SUSE-SU-2022:0774-1","SUSE-SU-2022:14890-1","UBUNTU-CVE-2018-16301","USN-5331-1","USN-5331-2","openSUSE-SU-2019:2343-1","openSUSE-SU-2019:2344-1","openSUSE-SU-2019:2345-1","openSUSE-SU-2019:2348-1","openSUSE-SU-2022:0774-1","openSUSE-SU-2024:10969-1","openSUSE-SU-2024:11425-1"],"status":"published","title":"libpcap before 1.9.1, as used in tcpdump before 4.9.3, has a buffer overflow and/or over-read...","description":"The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00626,"percentile":0.50287,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120","CWE-190","CWE-787"],"published":"2019-09-30T00:00:00Z","modified":"2026-10-24T10:47:37Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"libpcap","fixed_in":["1.1.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"libpcap","fixed_in":["1.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"libpcap","fixed_in":["1.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libpcap","fixed_in":["1.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libpcap","fixed_in":["1.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libpcap","fixed_in":["1.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libpcap","fixed_in":["1.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libpcap","fixed_in":["1.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libpcap","fixed_in":["1.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libpcap","fixed_in":["1.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libpcap","fixed_in":["1.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libpcap","fixed_in":["1.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libpcap","fixed_in":["1.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libpcap","fixed_in":["1.9.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.10","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"tcpdump","fixed_in":["4.9.3-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"tcpdump","fixed_in":["4.99.1-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"tcpdump","fixed_in":["4.99.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tcpdump","fixed_in":["4.99.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tcpdump","fixed_in":["4.99.0-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"tcpdump","fixed_in":["4.9.3-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"tcpdump","fixed_in":["4.9.3-6.oe1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"tcpdump","fixed_in":["4.9.2-14.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"tcpdump","fixed_in":["4.9.2-14.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"tcpdump","fixed_in":["4.9.2-14.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"tcpdump","fixed_in":["4.9.2-14.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"tcpdump","fixed_in":["4.9.2-14.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"tcpdump","fixed_in":["4.9.2-14.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"tcpdump","fixed_in":["4.9.2-14.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"tcpdump","fixed_in":["4.9.2-14.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"tcpdump","fixed_in":["4.9.2-14.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"tcpdump","fixed_in":["4.9.2-14.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"tcpdump","fixed_in":["4.9.2-14.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"tcpdump","fixed_in":["4.9.2-14.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"tcpdump","fixed_in":["4.9.2-14.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"tcpdump","fixed_in":["3.9.8-1.30.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"tcpdump","fixed_in":["3.9.8-1.30.19.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tcpdump","fixed_in":["4.9.3-0ubuntu0.16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"tcpdump","fixed_in":["4.9.3-0ubuntu0.18.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"tcpdump","fixed_in":["4.9.3-4ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"tcpdump","fixed_in":["4.9.2-3.18.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.99.1-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.99.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.99.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.99.0-1"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-1.mga7"}]}],"bundled":32},{"source":"osv","ecosystem":"Mageia:7","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1.mga7"}]}],"bundled":32},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-6.oe1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.8-1.30.13.1"}]}],"bundled":83},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.8-1.30.13.1"}]}],"bundled":83},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.17.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.17.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.8-1.30.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.8-1.30.19.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.0-1ubuntu1","4.5.1-2ubuntu1","4.5.1-2ubuntu1.1","4.5.1-2ubuntu1.2","4.9.0-1ubuntu1~ubuntu14.04.1","4.9.2-0ubuntu0.14.04.1","4.9.3-0ubuntu0.14.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.16.04.1+esm1"}]}],"versions":["4.7.4-1ubuntu1","4.9.0-1ubuntu1~ubuntu16.04.1","4.9.2-0ubuntu0.16.04.1","4.9.3-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.18.04.2"}]}],"versions":["4.9.2-1","4.9.2-2","4.9.2-2build1","4.9.2-2ubuntu1","4.9.2-3","4.9.3-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-4ubuntu0.1"}]}],"versions":["4.9.3-2","4.9.3-3","4.9.3-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.16.04.1+esm1"}]}],"versions":["4.7.4-1ubuntu1","4.9.0-1ubuntu1~ubuntu16.04.1","4.9.2-0ubuntu0.16.04.1","4.9.3-0ubuntu0.16.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-0ubuntu0.18.04.2"}]}],"versions":["4.9.2-1","4.9.2-2","4.9.2-2build1","4.9.2-2ubuntu1","4.9.2-3","4.9.3-0ubuntu0.18.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-4ubuntu0.1"}]}],"versions":["4.9.3-2","4.9.3-3","4.9.3-4"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-lp150.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-lp150.10.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-lp151.4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-lp151.4.6.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-3.18.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.99.1-1.2"}]}],"bundled":161}],"products":[{"vendor":"tcpdump","product":"tcpdump"},{"vendor":"the tcpdump group","product":"tcpdump"}],"references":[{"url":"https://github.com/the-tcpdump-group/tcpdump/commit/ad7c25bc0decf96dc7768c9e903734d38528b1bd","tags":["x_refsource_CONFIRM","x_transferred","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16301","tags":["web","advisory"]},{"url":"https://github.com/the-tcpdump-group/libpcap/blob/libpcap-1.9/CHANGES"},{"url":"https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES"},{"url":"https://github.com/advisories/GHSA-h8wh-rj39-x373"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-16301","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-16301","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-16301","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0297.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25565","tags":["report"]},{"url":"https://www.tcpdump.org/libpcap-changes.txt","tags":["web"]},{"url":"https://www.tcpdump.org/tcpdump-changes.txt","tags":["web"]},{"url":"https://www.tcpdump.org/public-cve-list.txt","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1862","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1863","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914191-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1057247","tags":["report"]},{"url":"https://bugzilla.suse.com/1153098","tags":["report"]},{"url":"https://bugzilla.suse.com/1153332","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15166","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192669-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15165","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192673-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192674-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1068716","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1010220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15167","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203360-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1178466","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8037","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220505-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1195825","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220774-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214890-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-16301","tags":["report"]},{"url":"http://www.tcpdump.org/public-cve-list.txt","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5331-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5331-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-8037","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7QM6GQXF2DKIIMQLWE33PWVPXIOYUGIV/#7QM6GQXF2DKIIMQLWE33PWVPXIOYUGIV","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MKQWXXAEJMKN6KVJXWDQTBKWQTVSGWAA/#MKQWXXAEJMKN6KVJXWDQTBKWQTVSGWAA","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AC2ESBQ7H3GD4M3CH2LEZXEYZONP5DEJ/#AC2ESBQ7H3GD4M3CH2LEZXEYZONP5DEJ","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZPOIE2ZQZQ57X2YSWXD43L2MIX37I54G/#ZPOIE2ZQZQ57X2YSWXD43L2MIX37I54G","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7F42RBJPTM53DGGULUXWD56J42LIIEII/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19519","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-16301","description":"The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.","status":"published","published":"2019-10-03T15:55:20Z","modified":"2026-10-08T21:13:46.491Z","cwes":["CWE-190","CWE-787"],"updated_at":"2026-11-02T14:35:11.072321Z"}],"euvd":[{"id":"EUVD-2018-8152","description":"The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.","status":"published","published":"2019-10-03T15:55:20Z","modified":"2026-10-08T21:13:46Z","updated_at":"2026-11-02T17:27:26.856493Z"}],"ghsa":[{"id":"GHSA-h8wh-rj39-x373","title":"libpcap before 1.9.1, as used in tcpdump before 4.9.3, has a buffer overflow and/or over-read...","description":"libpcap before 1.9.1, as used in tcpdump before 4.9.3, has a buffer overflow and/or over-read because of errors in pcapng reading.","status":"published","published":"2022-05-24T16:57:47Z","modified":"2026-10-09T00:32:05Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-120","CWE-190"],"updated_at":"2026-11-02T15:12:59.31428Z"}],"nvd":[{"id":"CVE-2018-16301","description":"The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.","status":"published","published":"2019-10-03T16:15:12.693Z","modified":"2026-10-08T22:16:45.897Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.4,"vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190","CWE-787","CWE-120"],"updated_at":"2026-11-02T14:04:59.278647Z"}],"osv":[{"id":"ALPINE-CVE-2018-16301","description":"The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.","status":"published","published":"2019-10-03T16:15:12.693Z","modified":"2026-10-23T17:17:55.225407078Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"AZL-8506","title":"CVE-2018-16301 affecting package tcpdump for versions less than 4.99.1-1","description":"The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.","status":"published","published":"2019-10-03T16:15:12Z","modified":"2026-04-21T04:34:51.391166Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:10.335477Z"},{"id":"BELL-CVE-2018-16301","title":"CVE-2018-16301 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:52.78243Z","modified":"2026-01-26T09:46:36.791903Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-16301","description":"The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.","status":"published","published":"2019-10-03T16:15:12.693Z","modified":"2026-10-24T10:47:37.858773591Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:08.533609Z"},{"id":"DEBIAN-CVE-2018-16301","description":"The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.","status":"published","published":"2019-10-03T16:15:12.693Z","modified":"2026-10-09T09:47:25.634350424Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"OESA-2022-1862","title":"tcpdump security update","description":"Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces.  Tcpdump can display all of the packet headers, or just the ones that match particular criteria.\r\n\r\nSecurity Fix(es):\r\n\r\nThe command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.(CVE-2018-16301)","status":"published","published":"2022-08-26T11:05:08Z","modified":"2026-08-18T01:17:10.229923178Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1863","title":"tcpdump security update","description":"Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces.  Tcpdump can display all of the packet headers, or just the ones that match particular criteria.\r\n\r\nSecurity Fix(es):\r\n\r\nThe command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.(CVE-2018-16301)","status":"published","published":"2022-08-26T11:05:08Z","modified":"2026-08-18T01:17:09.050617757Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2018-16301","description":"The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.","status":"published","published":"2019-09-30T00:00:00Z","modified":"2026-02-04T02:48:39.656573Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"MGASA-2019-0297","title":"Updated libpcap and tcpdump packages fix security vulnerabilities","description":"Updated libpcap and tcpdump packages fix security vulnerabilities:\n\nThe libpcap packages have been updated to versions 1.9.1 and tcpdump\nto 4.9.3, respectively, fixing several buffer overread and overflow\nissues.\n","status":"published","published":"2019-10-16T22:22:41Z","modified":"2026-04-16T04:44:25.592800208Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:2343-1","title":"Security update for libpcap","description":"This update for libpcap fixes the following issues:\n\n- CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332).\n- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-10-20T16:18:04Z","modified":"2026-02-04T03:19:43.048867Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2344-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098).\n- CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098).\n- CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098).\n- CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098).\n- CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098).\n- CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098).\n- CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098).\n- CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098).\n- CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098).\n- CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098).\n- CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098).\n- CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098).\n- CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098).\n- CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098).\n- CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098).\n- CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098).\n- CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098).\n- CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098).\n- CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098).\n- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098).\n- CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \\MAILSLOT\\BROWSE and \\PIPE\\LANMAN (bsc#1153098).\n- CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098).\n- CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-10-20T16:18:13Z","modified":"2026-02-04T02:49:18.186867Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2345-1","title":"Security update for libpcap","description":"This update for libpcap fixes the following issues:\n\n- CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332).\n- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-10-20T16:18:19Z","modified":"2026-02-04T04:04:28.861866Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2348-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098).\n- CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098).\n- CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098).\n- CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098).\n- CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098).\n- CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098).\n- CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098).\n- CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098).\n- CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098).\n- CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098).\n- CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098).\n- CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098).\n- CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098).\n- CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098).\n- CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098).\n- CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098).\n- CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098).\n- CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098).\n- CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098).\n- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098).\n- CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \\MAILSLOT\\BROWSE and \\PIPE\\LANMAN (bsc#1153098).\n- CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098).\n- CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-10-20T18:19:33Z","modified":"2026-02-04T02:55:24.542665Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2022:0774-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2018-16301: Fixed segfault when handling large files (bsc#1195825).\n","status":"published","published":"2022-03-09T09:52:21Z","modified":"2026-02-04T03:08:01.391309Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:10969-1","title":"libpcap-devel-1.10.1-1.2 on GA media","description":"These are all security issues fixed in the libpcap-devel-1.10.1-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:08:05.793121Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11425-1","title":"tcpdump-4.99.1-1.2 on GA media","description":"These are all security issues fixed in the tcpdump-4.99.1-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:56:33.613635Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2019:14191-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2017-12995: Fixed an infinite loop in the DNS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12893: Fixed a buffer over-read in the SMB/CIFS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12894: Fixed a buffer over-read in several protocol parsers that allowed remote DoS (bsc#1057247).\n- CVE-2017-12896: Fixed a buffer over-read in the ISAKMP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12897: Fixed a buffer over-read in the ISO CLNS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12898: Fixed a buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12899: Fixed a buffer over-read in the DECnet parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12900: Fixed a buffer over-read in the in several protocol parsers that allowed remote DoS (bsc#1057247).\n- CVE-2017-12901: Fixed a buffer over-read in the EIGRP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12902: Fixed a buffer over-read in the Zephyr parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12985: Fixed a buffer over-read in the IPv6 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12986: Fixed a buffer over-read in the IPv6 routing header parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12987: Fixed a buffer over-read in the 802.11 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12988: Fixed a buffer over-read in the telnet parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12991: Fixed a buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12992: Fixed a buffer over-read in the RIPng parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12993: Fixed a buffer over-read in the Juniper protocols parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12996: Fixed a buffer over-read in the PIMv2 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12998: Fixed a buffer over-read in the IS-IS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-12999: Fixed a buffer over-read in the IS-IS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13001: Fixed a buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13002: Fixed a buffer over-read in the AODV parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13003: Fixed a buffer over-read in the LMP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13004: Fixed a buffer over-read in the Juniper protocols parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13005: Fixed a buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13006: Fixed a buffer over-read in the L2TP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13008: Fixed a buffer over-read in the IEEE 802.11 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13009: Fixed a buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13010: Fixed a buffer over-read in the BEEP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13012: Fixed a buffer over-read in the ICMP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13013: Fixed a buffer over-read in the ARP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13014: Fixed a buffer over-read in the White Board protocol parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13016: Fixed a buffer over-read in the ISO ES-IS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13017: Fixed a buffer over-read in the DHCPv6 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13018: Fixed a buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13019: Fixed a buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13021: Fixed a buffer over-read in the ICMPv6 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13022: Fixed a buffer over-read in the IP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13023: Fixed a buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13024: Fixed a buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13025: Fixed a buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13027: Fixed a buffer over-read in the LLDP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13028: Fixed a buffer over-read in the BOOTP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13029: Fixed a buffer over-read in the PPP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13030: Fixed a buffer over-read in the PIM parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13031: Fixed a buffer over-read in the IPv6 fragmentation header parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13032: Fixed a buffer over-read in the RADIUS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13034: Fixed a buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13035: Fixed a buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13036: Fixed a buffer over-read in the OSPFv3 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13037: Fixed a buffer over-read in the IP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13038: Fixed a buffer over-read in the PPP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13041: Fixed a buffer over-read in the ICMPv6 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13047: Fixed a buffer over-read in the ISO ES-IS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13048: Fixed a buffer over-read in the RSVP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13049: Fixed a buffer over-read in the Rx protocol parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13051: Fixed a buffer over-read in the RSVP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13053: Fixed a buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13055: Fixed a buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13687: Fixed a buffer over-read in the Cisco HDLC parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13688: Fixed a buffer over-read in the OLSR parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13689: Fixed a buffer over-read in the IKEv1 parser that allowed remote DoS (bsc#1057247).\n- CVE-2017-13725: Fixed a buffer over-read in the IPv6 routing header parser that allowed remote DoS (bsc#1057247).\n- CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098).\n- CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098).\n- CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098).\n- CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098).\n- CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098).\n- CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098).\n- CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098).\n- CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098).\n- CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098).\n- CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098).\n- CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098).\n- CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098).\n- CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098).\n- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098).\n- CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \\MAILSLOT\\BROWSE and \\PIPE\\LANMAN (bsc#1153098).\n- CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098).\n- CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098).\n","status":"published","published":"2019-10-15T09:18:48Z","modified":"2026-02-04T03:33:59.754201Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2669-1","title":"Security update for libpcap","description":"This update for libpcap fixes the following issues:\n\n- CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332).\n- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332).\n","status":"published","published":"2019-10-15T12:38:54Z","modified":"2026-02-04T04:14:09.166509Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2673-1","title":"Security update for libpcap","description":"This update for libpcap fixes the following issues:\n\n- CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332).\n- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332).\n","status":"published","published":"2019-10-15T14:53:11Z","modified":"2025-05-02T04:07:53.353739Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2674-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098).\n- CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098).\n- CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098).\n- CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098).\n- CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098).\n- CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098).\n- CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098).\n- CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098).\n- CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098).\n- CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098).\n- CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098).\n- CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098).\n- CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098).\n- CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098).\n- CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098).\n- CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098).\n- CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098).\n- CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098).\n- CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098).\n- CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098).\n- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098).\n- CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \\MAILSLOT\\BROWSE and \\PIPE\\LANMAN (bsc#1153098).\n- CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098).\n- CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098).\n- CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098).\n","status":"published","published":"2019-10-15T14:53:30Z","modified":"2026-02-04T02:49:51.513216Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:3360-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size (bsc#1178466).\n\nThe previous update of tcpdump already fixed variuous Buffer overflow/overread vulnerabilities [bsc#1153098, bsc#1153332]\n\n- CVE-2017-16808 (AoE)\n- CVE-2018-14468 (FrameRelay)\n- CVE-2018-14469 (IKEv1)\n- CVE-2018-14470 (BABEL)\n- CVE-2018-14466 (AFS/RX)\n- CVE-2018-14461 (LDP)\n- CVE-2018-14462 (ICMP)\n- CVE-2018-14465 (RSVP)\n- CVE-2018-14464 (LMP)\n- CVE-2019-15166 (LMP)\n- CVE-2018-14880 (OSPF6)\n- CVE-2018-14882 (RPL)\n- CVE-2018-16227 (802.11)\n- CVE-2018-16229 (DCCP)\n- CVE-2018-14467 (BGP)\n- CVE-2018-14881 (BGP)\n- CVE-2018-16230 (BGP)\n- CVE-2018-16300 (BGP)\n- CVE-2018-14463 (VRRP)\n- CVE-2019-15167 (VRRP)\n- CVE-2018-14879 (tcpdump -V)\n- CVE-2018-16228 (HNCP) is a duplicate of the already fixed CVE-2019-1010220\n- CVE-2018-16301 (fixed in libpcap)\n- CVE-2018-16451 (SMB)\n- CVE-2018-16452 (SMB)\n- CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled)\n- CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled)\n","status":"published","published":"2020-11-17T12:41:00Z","modified":"2026-02-04T03:53:34.005689Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2022:0505-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2018-16301: Fixed segfault when handling large files (bsc#1195825).\n","status":"published","published":"2022-02-18T09:58:09Z","modified":"2026-02-04T02:15:34.828388Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0774-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2018-16301: Fixed segfault when handling large files (bsc#1195825).\n","status":"published","published":"2022-03-09T09:53:21Z","modified":"2026-02-04T02:53:59.670044Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:14890-1","title":"Security update for tcpdump","description":"This update for tcpdump fixes the following issues:\n\n- CVE-2018-16301: Fixed segfault when handling large files (bsc#1195825).\n","status":"published","published":"2022-02-18T09:59:42Z","modified":"2026-02-04T02:24:54.359527Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-5331-1","title":"tcpdump vulnerabilities","description":"It was discovered that tcpdump incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause a denial of service,\nor possibly execute arbitrary code. (CVE-2018-16301)\n\nIt was discovered that tcpdump incorrectly handled certain captured data.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2020-8037)\n","status":"published","published":"2022-03-16T12:53:13Z","modified":"2026-06-25T13:31:03.486090038Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5331-2","title":"tcpdump vulnerabilities","description":"USN-5331-1 fixed several vulnerabilities in tcpdump. This update provides\nthe corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. \n\nOriginal advisory details:\n It was discovered that tcpdump incorrectly handled certain inputs.\n An attacker could possibly use this issue to cause a denial of service,\n or possibly execute arbitrary code. (CVE-2018-16301)\n \n It was discovered that tcpdump incorrectly handled certain captured data.\n An attacker could possibly use this issue to cause a denial of service.\n (CVE-2020-8037)\n","status":"published","published":"2022-04-11T07:44:40Z","modified":"2026-04-27T16:00:01.393906Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}