The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the va…

{
                    "product": "tcpdump",
                    "vendor": "The Tcpdump Group",
                    "versions": [
                        {
                            "lessThan": "4.99.0",
                            "status": "affected",
                            "version": "unspecified",
                            "versionType": "custom"
                        }
                    ]
                }