The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldptlvprint().
{ "vanir_signatures": [ { "source": "https://github.com/the-tcpdump-group/tcpdump/commit/aa5c6b710dfd8020d2c908d6b3bd41f1da719b3b", "signature_version": "v1", "id": "CVE-2018-14461-0c7ffd40", "signature_type": "Function", "target": { "file": "print-ldp.c", "function": "ldp_pdu_print" }, "digest": { "function_hash": "161581225281747949875289021539690713008", "length": 2599.0 }, "deprecated": false }, { "source": "https://github.com/the-tcpdump-group/tcpdump/commit/aa5c6b710dfd8020d2c908d6b3bd41f1da719b3b", "signature_version": "v1", "id": "CVE-2018-14461-3d3a7295", "signature_type": "Function", "target": { "file": "print-ldp.c", "function": "ldp_tlv_print" }, "digest": { "function_hash": "93760966478014213445068173713067531115", "length": 7547.0 }, "deprecated": false }, { "source": "https://github.com/the-tcpdump-group/tcpdump/commit/aa5c6b710dfd8020d2c908d6b3bd41f1da719b3b", "signature_version": "v1", "id": "CVE-2018-14461-52a1d1a1", "signature_type": "Line", "target": { "file": "print-ldp.c" }, "digest": { "line_hashes": [ "289703030268166481232338153373594049307", "223427521997023309030568600153848105205", "176811483851737040482533352398485090073", "526230578838001528384196752132589473", "312336997356234814854410701948318556676", "242945709961197347557567827568716395562", "212117046461965677033427183275016328297", "130447880486094321317912178515264487440", "12182785764981433583583166476737959419", "164964746033491799180527021092923223130", "59933227455414946547617900343596837583", "65627742088940378838481512941441019359", "252614537185397388577631200571045662647", "94975332246970566628116546097558289520", "272379595508813694787323207093681095914", "163926649660697997160215476178735881868", "69930003485799567049909765582590009631", "198659329478209431905536569868825448297" ], "threshold": 0.9 }, "deprecated": false } ] }