CVE-2018-14465: The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().

Security readout for executives and security teams

This issue affects tcpdump versions before 4.9.3 when decoding RSVP network data. A malformed packet or capture could trigger a buffer over-read in the RSVP parser, creating a high availability risk for systems where tcpdump processes untrusted traffic. Exposure is most likely on Linux, Unix, macOS, appliances, or monitoring workflows running tcpdump before 4.9.3 or vendor packages that include the vulnerable parser. Risk increases where tcpdump analyzes live or captured traffic from untrusted networks. Treat as a high-priority hygiene fix for network operations and security monitoring environments. It is not evidenced as actively exploited in the bundle, but tcpdump often touches untrusted traffic and is widely redistributed through operating systems and appliances. Mitigation focus: Upgrade tcpdump to 4.9.3 or a vendor-patched package.; Apply relevant OS vendor security updates for Debian, Fedora, openSUSE, Ubuntu, Apple, or NetApp systems.; Inventory appliances and monitoring tools that bundle tcpdump..

Prepared

May 24, 2026, 09:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.