cve/2018/CVE-2018-16301.md

### [CVE-2018-16301](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16301)
![](https://img.shields.io/static/v1?label=Product&message=tcpdump&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%204.99.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-190%20integer%20overflow%20or%20wraparound&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-787%20out-of-bounds%20write&color=brighgreen)

### Description

The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Morton-L/BoltWrt