The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccpprintoption().
{ "vanir_signatures": [ { "digest": { "length": 2996.0, "function_hash": "38383201679079130899294637139498473300" }, "signature_version": "v1", "deprecated": false, "source": "https://github.com/the-tcpdump-group/tcpdump/commit/211124b972e74f0da66bc8b16f181f78793e2f66", "target": { "file": "print-dccp.c", "function": "dccp_print_option" }, "id": "CVE-2018-16229-6bd31a3c", "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "80541626596239312678749507066833978952", "160583291135666555057787933568622204849", "11171308657376623994530052264538627052", "102820812960593600009163127870082794269", "276467132708306596796063084422810237641", "143924100216417511072566948395735360464", "50968875749594427971420577075685288242", "319315448786181428646957345302191695797", "209223184212892659522657885249951004272", "268855214712855211019521312423739724219", "74596580618139499334525227353706786339", "277432741061583505996310477753018284939", "49935843873894220316749347004328224424", "319315448786181428646957345302191695797", "209223184212892659522657885249951004272", "335605274497177244195176211672285575469", "46255501249504780293788451862446038770", "244826428580748513898351374290949928387", "292326438086214817830006953982030073792", "303850592706126546226141738238621253646", "283654405206772500080971276565333542596" ] }, "signature_version": "v1", "deprecated": false, "source": "https://github.com/the-tcpdump-group/tcpdump/commit/211124b972e74f0da66bc8b16f181f78793e2f66", "target": { "file": "print-dccp.c" }, "id": "CVE-2018-16229-fe9db458", "signature_type": "Line" } ] }