CVE-2018-16301 is a buffer overflow vulnerability in the command-line argument parser of tcpdump versions prior to 4.99.0, specifically within the read_infile() function. An attacker can trigger this by creating a 4GB file on the local filesystem and providing its name via the -F command-line argument. With a CVSS score of 7.8 (High), this vulnerability allows for high impact to confidentiality, integrity, and availability, requiring local access and user interaction to exploit. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 4.99.0CPE matchmatch criteria | cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
CVE-2018-16301
Feb 8, 2022The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.
Oct 8, 2019tcpdump: Buffer overflow in the -F command line argument parser
Sep 30, 2019