CVE-2019-15167 Memory corruption in n/a

Critical 9.1 Published 27 Aug 2022 Updated 3 Dec 2025

A buffer over-read in tcpdump's VRRP parser allows attackers to cause denial of service or disclose sensitive memory contents via crafted packets.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2019-15167?

CVE-2019-15167 is a critical memory corruption vulnerability in Tcpdump Tcpdump, published on 27 Aug 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463.

Weakness: CWE-125

Which versions are affected by CVE-2019-15167?

It affects 1 product.

Products include Tcpdump Tcpdump.

How do I fix CVE-2019-15167?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2019-15167 being exploited?

There is no known exploitation of CVE-2019-15167 in the wild and no public exploit code.

All Tcpdump Tcpdump vulnerabilities

Sources

Also known as ALPINE-CVE-2019-15167, DEBIAN-CVE-2019-15167, GHSA-x3gm-3hr2-8g66, UBUNTU-CVE-2019-15167.