CVE Database
/

CVE-2018-16301

Back to search

CVE-2018-16301

Published: Oct 3, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.

VendorProductVersions

The Tcpdump Group

tcpdump

affected
unspecified - < 4.99.0

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now