Vulnerabilities (CVE)

Filtered by vendor Tcpdump Subscribe
Filtered by product Libpcap
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-15165 1 Tcpdump 1 Libpcap 2021-12-26 5.0 MEDIUM 5.3 MEDIUM
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
CVE-2019-15161 1 Tcpdump 1 Libpcap 2020-08-24 5.0 MEDIUM 5.3 MEDIUM
rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request.
CVE-2019-15162 2 Opengroup, Tcpdump 2 Unix, Libpcap 2019-10-27 5.0 MEDIUM 5.3 MEDIUM
rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames.
CVE-2019-15164 1 Tcpdump 1 Libpcap 2019-10-27 5.0 MEDIUM 5.3 MEDIUM
rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source.