The TCPdump Group

Products

ProductCVEsExploitedLatest
libpcap11–Sep 5, 2026
tcpdump4–Apr 12, 2024
tcpslice1–Jan 5, 2022

Exploited and recent CVEs

  • CVE-2026-18238 Medium 5.0 OOBR in rpcap client in libpcap before 1.10.7 0.2%
  • CVE-2026-18313 Medium 4.3 rpcapd memory leak in libpcap before 1.10.7 0.2%
  • CVE-2026-6554 High 7.5 infinte loop in libpcap before 1.10.7 0.4%
  • CVE-2026-6244 Medium 5.5 division by zero in libpcap before 1.10.7 0.1%
  • CVE-2026-31911 Medium 5.5 abort() in libpcap before 1.10.7 on an invalid BPF opcode 0.1%
  • CVE-2026-31912 Medium 5.5 OOBR in libpcap before 1.10.7 0.1%
  • CVE-2026-0799 High 8.7 OOBR and OOBW in libpcap before 1.10.7 0.1%
  • CVE-2025-11964 Low 1.9 OOBW in utf_16le_to_utf_8_truncated() in libpcap 0.1%
  • CVE-2025-11961 Low 1.9 OOBR and OOBW in pcap_ether_aton() in libpcap 0.1%
  • CVE-2024-8006 Medium 4.4 NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support 0.2%
  • CVE-2023-7256 Medium 4.4 Double-free in libpcap before 1.10.5 with remote packet capture support. 0.2%
  • CVE-2024-2397 Medium 6.2 infinite loop in the PPP printer of tcpdump 0.3%
  • CVE-2023-1801 Unrated The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet. 0.8%
  • CVE-2021-41043 Unrated Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact. 0.9%
  • CVE-2020-8036 Unrated str2tokbuf used incorrectly by print-someip.c 1.5%
  • CVE-2020-8037 Unrated ppp decapsulator can be convinced to allocate a large amount of memory 3.1%