USN-3415-2: tcpdump vulnerabilities

USN-3415-1 fixed vulnerabilities in tcpdump for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 17.04. This update provides the corresponding tcpdump update for Ubuntu 12.04 ESM. Original advisory details: Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attack...

USN-3415-1: tcpdump vulnerabilities

Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service application crash or possibly execute arbitrary code. CVE-2017-11543 Bhargava Shastry discovered a buffer overflow in the bitfield converter utility function...

USN-3415-1 tcpdump vulnerabilities

Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service application crash or possibly execute arbitrary code. CVE-2017-11543 Bhargava Shastry discovered a buffer overflow in the bitfield converter utility function...

Tcpdump LLDP Parser Denial of Service Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.LLDP parser is one of the link layer discovery protocol parsers. A...

Tcpdump ISAKMP Parser Denial of Service Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.ISAKMP parser is one of the key exchange protocol parsers. A denial of...

CVE-2017-12997

The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...

CVE-2017-12989

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:respgetlength...

UBUNTU-CVE-2017-12997

The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...

CVE-2017-12990

The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions...

UBUNTU-CVE-2017-12990

The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions...

UBUNTU-CVE-2017-12989

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:respgetlength...

UBUNTU-CVE-2017-12995

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...

Jasper Denial of Service Vulnerability (CNVD-2017-33083)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A security vulnerability exists in the 'jpcdectileinit' function in the jpc/jpcdec.c file in Jasper version 2.0.13. A remote attacker can exploit this vulnerability to cause a...

Updated tcpdump packages fix security vulnerabilities

Summary for 4.9.2 tcpdump release Do not use getprotobynumber for protocol name resolution. Do not do any protocol name resolution if -n is specified. Improve errors detection in the test scripts. Fix a segfault with OpenSSL 1.1 and improve OpenSSL usage. Clean up IS-IS printing. Fix buffer...

MGASA-2017-0335 Updated tcpdump packages fix security vulnerabilities

Summary for 4.9.2 tcpdump release Do not use getprotobynumber for protocol name resolution. Do not do any protocol name resolution if -n is specified. Improve errors detection in the test scripts. Fix a segfault with OpenSSL 1.1 and improve OpenSSL usage. Clean up IS-IS printing. Fix buffer...

CVE-2017-14229

There is an infinite loop in the jpcdectileinit function in jpc/jpcdec.c of Jasper 2.0.13. It will lead to a remote denial of service attack...

Design/Logic Flaw

There is an infinite loop in the jpcdectileinit function in jpc/jpcdec.c of Jasper 2.0.13. It will lead to a remote denial of service attack...

CVE-2017-14229

There is an infinite loop in the jpcdectileinit function in jpc/jpcdec.c of Jasper 2.0.13. It will lead to a remote denial of service attack...

CVE-2017-14229

CVE-2017-14229 affects Jasper 2.0.13: an infinite loop in jpc_dec_tileinit (jpc/jpc_dec.c) enables remote denial of service. The connected sources corroborate the same description across multiple feeds (NVD/Red Hat/CNVD/osv/etc.), listing the vulnerable function and the infinite-loop trigger as t...

CVE-2017-14229

There is an infinite loop in the jpcdectileinit function in jpc/jpcdec.c of Jasper 2.0.13. It will lead to a remote denial of service attack...