Tcpdump MPTCP Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.MPTCP parser is one of the MPTCP parsers. A buffer overflow...

Tcpdump PPP parser buffer overflow vulnerability (CNVD-2017-28271)

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.PPP parser is one of the peer-to-peer protocol parsers. A buffer...

Tcpdump LLDP Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.LLDP parser is one of the link layer discovery protocol parsers. A...

Tcpdump RIPng Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.RIPng parser is one of the routing information protocol parsers. A...

UBUNTU-CVE-2017-13043

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodemulticastvpn...

UBUNTU-CVE-2017-12896

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmprfc3948print...

UBUNTU-CVE-2017-13022

The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintroute...

UBUNTU-CVE-2017-13051

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...

UBUNTU-CVE-2017-12899

The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnetprint...

PT-2017-12888

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the VQP parser, specifically in the vqp print function within print-vqp.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or later ...

PT-2017-12883

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the MPTCP parser, specifically in the print-mptcp.c file, affecting several functions. Recommendations For versions prior to 4.9.2, update to version 4.9...

PT-2017-12879

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the IP parser, specifically in the ip printts function within print-ip.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or later t...

CVE-2017-10254

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: Staffing Front Office. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

Artifex Ghostscript GhostXPS Heap Buffer Overflow Vulnerability

Artifex Ghostscript is an open source PostScript a page description language and programming language for the electronics industry and desktop publishing parser from Artifex Software. Artifex Ghostscript A security vulnerability exists in the 'xpsloadsfntname' function of the xps/xpsfont.c file i...

CVE-2016-8964

IBM BigFix Inventory v9 9.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 118853...

CVE-2016-8962

IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 118851...

CVE-2017-3521

Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products subcomponent: Supplier Registration. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2017-3522

Vulnerability in the PeopleSoft Enterprise SCM eSupplier Connection component of Oracle PeopleSoft Products subcomponent: Vendor. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-3502

Vulnerability in the PeopleSoft Enterprise FIN Receivables component of Oracle PeopleSoft Products subcomponent: Receivables. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

Oracle PeopleSoft Enterprise SCM eBill Payment Remote Vulnerability

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle, which provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise SCM eBill Payment is one of the electronic billing display solution...