CVE-2002-0380 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Tcpdump

8 documents7 sources
Severity
7.5HIGHNVD
EPSS
4.4%
top 11.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
TcpdumpLBL Tcpdump
Timeline
PublishedJun 18
Latest updateMay 3

Description

Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶Debiantcpdump/tcpdump< 3.7.1-1.2+3
▶NVDlbl/tcpdump3.6.2

🔴Vulnerability Details

3
GHSA
GHSA-96qc-cv4m-j8fq: Buffer overflow in tcpdump 3↗2022-05-03
▶
CVEList
CVE-2002-0380: Buffer overflow in tcpdump 3↗2004-09-01
▶
OSV
CVE-2002-0380: Buffer overflow in tcpdump 3↗2002-06-18
▶

📋Vendor Advisories

2
Red Hat
security flaw↗2002-05-31
▶
Debian
CVE-2002-0380: tcpdump - Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a ...↗2002
▶

💬Community

2
Bugzilla
CVE-2002-0380 security flaw↗2018-08-16
▶
Bugzilla
tcpdump problem with bgp decoding↗2003-01-29
▶
CVE-2002-0380 — LBL Tcpdump vulnerability | cvebase