This page lists publicly disclosed CVE vulnerabilities affecting redhat tcpdump (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2014-9140 | Buffer overflow in the ppp_hdlc function in print-ppp.c in tcpdump 4.6.2 and earlier allows remote attackers to cause a denial of service (crash) cia a crafted PPP packet. | [email protected] | 5.0 | 5.76% | 2014-12-05 | 2026-06-16 |
| CVE-2014-8769 | tcpdump 3.8 through 4.6.2 might allow remote attackers to obtain sensitive information from memory or cause a denial of service (packet loss or segmentation fault) via a crafted Ad hoc On-Demand Distance Vector (AODV) packet, which triggers an out-of-bounds memory access. | [email protected] | 6.4 | 5.51% | 2014-11-20 | 2026-06-16 |
| CVE-2014-8768 | Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fault and crash) via a crafted length value in a Geonet frame. | [email protected] | 5.0 | 19.81% | 2014-11-20 | 2026-06-16 |
| CVE-2014-8767 | Integer underflow in the olsr_print function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allows remote attackers to cause a denial of service (crash) via a crafted length value in an OLSR frame. | [email protected] | 5.0 | 5.47% | 2014-11-20 | 2026-06-16 |
| CVE-2003-0989 | tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057. | [email protected] | 7.5 | 5.26% | 2004-02-17 | 2026-06-16 |
| CVE-2003-0194 | tcpdump does not properly drop privileges to the pcap user when starting up. | [email protected] | 4.6 | 0.37% | 2003-06-09 | 2026-06-16 |