The Tcpdump Group vulnerabilities
We track 2 vulnerabilities in The Tcpdump Group products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 5, 2026.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest The Tcpdump Group vulnerabilities
- 7.5 High severity
libpcap: Loop with Unreachable Exit Condition
libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. A crafted filter program or the 'protochain' primitive used on a crafted n
- 8.7 High severity
libpcap: Out-of-bounds Read
In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter pr