The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmpprintdatalinksubobjs().
{ "vanir_signatures": [ { "id": "CVE-2018-14464-47b28fbd", "signature_type": "Function", "target": { "file": "print-lmp.c", "function": "lmp_print_data_link_subobjs" }, "signature_version": "v1", "digest": { "length": 1575.0, "function_hash": "223781097617941555671292774538573925077" }, "deprecated": false, "source": "https://github.com/the-tcpdump-group/tcpdump/commit/d97e94223720684c6aa740ff219e0d19426c2220" }, { "id": "CVE-2018-14464-6149f4b2", "signature_type": "Function", "target": { "file": "print-lmp.c", "function": "lmp_print" }, "signature_version": "v1", "digest": { "length": 15842.0, "function_hash": "111531773032566227848925832575478875783" }, "deprecated": false, "source": "https://github.com/the-tcpdump-group/tcpdump/commit/d97e94223720684c6aa740ff219e0d19426c2220" }, { "id": "CVE-2018-14464-a00e0da2", "signature_type": "Line", "target": { "file": "print-lmp.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "211645286450770030049170253702969949252", "331046351244714000878651818245382258605", "312452169484149012542514683871108143242", "11072548933551033353887830140605766698", "49962724955565531448745371898632588053", "123096101720696760240597195359952597719", "69329811293033162148935782802049672309", "76379693740291541415781019142619384520", "71875287416245361337864187456621964705", "103287619098535877798894211131711328987", "226650534762602372832433522816504437693", "47154329592761970152510065029831609760", "79883790364244945536289590175877805168", "231034633513059032859068608921912721828", "191410550562165635764307030616361762868", "203723792075020222078979196281577810611", "303340729823119421557705235790980184046", "58901518268968960572767641780772982749", "278720817935718714037980234024072685248", "70256183810503396506662378120769014038", "52830941610203417572298827682465439321", "292884148387453558161593985863454509247", "191410550562165635764307030616361762868", "92258865668750712153216822031590911446" ], "threshold": 0.9 }, "deprecated": false, "source": "https://github.com/the-tcpdump-group/tcpdump/commit/d97e94223720684c6aa740ff219e0d19426c2220" } ] }