Buffer Overflow Vulnerability in tcpdump by the Tcpdump Group

CVE-2018-16301

What is CVE-2018-16301?

The tcpdump command-line utility is susceptible to a buffer overflow due to improper handling of input file names. Attackers can exploit this flaw by creating a large 4GB file on the local filesystem and passing the filename as an argument using the -F option. This can lead to potential denial of service or arbitrary code execution, posing a significant risk to systems utilizing affected versions.

References