PT-2017-3916

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the LMP parser of the tcpdump utility, specifically in the lmp print data link subobjs function in print-lmp.c. This can allow a remote attacker to gain...

CVE-2017-13003

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

DEBIAN-CVE-2017-13003

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

CVE-2017-13003

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

Buffer overflow

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

CVE-2017-13003

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

CVE-2017-13003

CVE-2017-13003 affects tcpdump prior to 4.9.2, where the LMP parser’s lmp_print() could read memory beyond bounds (buffer over-read). This vulnerability may enable an attacker to obtain sensitive information or crash the application when parsing LMP data. The issue is resolved by upgrading to tcp...

CVE-2017-13003

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

CVE-2017-13003

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

CVE-2017-13003: Out-of-bounds Read

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

UBUNTU-CVE-2017-13003

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

PT-2017-12843

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the LMP parser, specifically in the lmp print function within the print-lmp.c file. This problem can lead to potential data exposure or crashes...

[Full-disclosure] CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability CA Vulnerability ID: 34013 CA Advisory Date: 2006-05-02 Discovered By: IBM Global Services Impact: Local attacker can gain escalated privileges. Summary: A potential...

Design/Logic Flaw

Unspecified vulnerability in CA Resource Initialization Manager CAIRIM 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain "problem state program" that uses SVC to gain access to supervisor state, key...

CVE-2006-2201

Unspecified vulnerability in CA Resource Initialization Manager CAIRIM 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain "problem state program" that uses SVC to gain access to supervisor state, key...

CVE-2006-2201

CAIRIM (CA Resource Initialization Manager) 1.x before 20060502 has an integrity violation due to a "problem state program" that uses SVC to elevate to supervisor state (key 0) in z/OS Common Services and LMP components across multiple products. This CVE affects CAIRIM and is documented with a vu...

CVE-2006-2201

Unspecified vulnerability in CA Resource Initialization Manager CAIRIM 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain "problem state program" that uses SVC to gain access to supervisor state, key...

CVE-2006-2201: Undefined Security Weakness

Unspecified vulnerability in CA Resource Initialization Manager CAIRIM 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain "problem state program" that uses SVC to gain access to supervisor state, key...

CVE-2005-1464

CVE-2005-1464 is listed among multiple vulnerabilities in Ethereal up to version 0.10.11 that allow a remote attacker to cause a denial of service (infinite loop). The connected advisories confirm Ethereal upgrades to version 0.10.11 as a remediation. The exact root cause per-CVE isn’t detailed i...

CVE-2002-1356: Undefined Security Weakness

Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed packets to the 1 LMP, 2 PPP, or 3 TDS dissectors, possibly related to a missing field for EndVerifyAck messages...