CVE-2019-15167: Tcpdump

Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days.

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463.

Affected products

• Tcpdump Tcpdump: before 4.9.3 (fixed in 4.9.3)

Published 2022-08-27. Last modified 2026-06-17.