PT-2017-12836

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a bug in the LLDP parser, which could cause an infinite loop due to a problem in the lldp private 8021 print function. This could potentially allow a remote attacker to obtain...

PT-2017-12829

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to the ISAKMP parser in tcpdump, which could enter an infinite loop due to bugs in print-isakmp.c, affecting several functions. Additionally, it could allow a remote attacker to...

PT-2017-12852

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to several protocol parsers in tcpdump that could cause a buffer overflow in the bittok2str internal function. Additionally, a buffer overread memory issue in the HNCP component...

PT-2017-12869

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the LLDP parser, specifically in the lldp mgmt addr tlv print function within print-lldp.c. Recommendations For versions prior to 4.9.2, update to versio...

PT-2017-12879

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the IP parser, specifically in the ip printts function within print-ip.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or later t...

PT-2017-12883

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the MPTCP parser, specifically in the print-mptcp.c file, affecting several functions. Recommendations For versions prior to 4.9.2, update to version 4.9...

PT-2017-12884

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the ICMPv6 parser, specifically in the icmp6 nodeinfo print function within the print-icmp6.c file. Recommendations For versions prior to 4.9.2, update t...

PT-2017-12888

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the VQP parser, specifically in the vqp print function within print-vqp.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or later ...

PT-2017-12894

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the RPKI-Router parser, specifically in the rpki rtr pdu print function within the print-rpki-rtr.c file. This problem can lead to potential data exposur...

PT-2017-12899

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the ISO IS-IS parser, specifically in the isis print is reach subtlv function within print-isoclns.c. Recommendations For versions prior to 4.9.2, update...

PT-2017-13016

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 ALT Linux affected versions not specified Description The issue is related to a buffer over-read in the Cisco HDLC parser. There is no information provided about the estimated number of potentially affected...

PT-2017-13017

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 ALT Linux affected versions not specified Description The issue is related to a buffer over-read in the OLSR parser. There is no information provided about the estimated number of potentially affected devices...

PT-2017-13018

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 ALT Linux affected versions not specified Description The issue concerns a buffer over-read in the IKEv1 parser, specifically in the ikev1 id print function within print-isakmp.c. This problem affects the tcpdum...

PT-2017-12891

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the RSVP parser, specifically in the rsvp obj print function within print-rsvp.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or...

PT-2017-12897

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the BGP parser, specifically in the decode rt routing info function within print-bgp.c. Recommendations For versions prior to 4.9.2, update to version...

PT-2017-12898

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the LLDP parser, specifically in the lldp private 8023 print function within the print-lldp.c file. Recommendations For versions prior to 4.9.2, update t...

PT-2017-13307

Name of the Vulnerable Software and Affected Versions MongoDB libbson version 1.7.0 Description The issue arises from a miscalculation in the bson iter codewscope function, which leads to a denial of service due to a heap-based buffer over-read in the bson utf8 validate function. This can be...

The vulnerability of the Unpack::Unpack20 function in the libunrar.a library, a file archiver for the UnRAR archive format, allows a malicious actor to cause the application to terminate abnormally.

The vulnerability of the Unpack::Unpack20 function in the libunrar.a library, a tool for decompressing UnRAR files, arises from operations that go beyond the boundaries of memory buffers reading from locations outside of memory space. Exploiting this vulnerability can allow an attacker to cause t...

openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function

An unsigned integer wrap around that led to a buffer over-read was found when parsing OFPTQUEUEGETCONFIGREPLY messages in Open vSwitch OvS. An attacker could use this issue to cause a remote denial of service attack...

openvswitch: Buffer over-read while parsing the group mod OpenFlow message

A buffer over-read issue was found in Open vSwitch OvS which emerged while parsing the GroupMod OpenFlow messages sent from the controller. The issue could enable an attacker to cause a denial of service type of attack...