DEBIAN-CVE-2017-12991

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...

CVE-2017-13048

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...

CVE-2017-13689

The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1idprint...

CVE-2017-12993

The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions...

CVE-2017-13013

The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions...

CVE-2017-13689

The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1idprint...

CVE-2017-13053

CVE-2017-13053 affects tcpdump prior to 4.9.2, due to a buffer over-read in the BGP parser (print-bgp.c:decode_rt_routing_info). The issue is in tcpdump’s BGP decoding path and upgraded builds (tcpdump 4.9.2 or later) are issued as the fix per linked advisories; exploitation details are not expli...

CVE-2017-12999

tcpdump contains a buffer over-read in the IS-IS parser (print-isoclns.c:isis_print) affecting the tcpdump project; CVE-2017-12999 is documented in multiple advisories. Publicly disclosed details show the issue exists in tcpdump prior to version 4.9.2 and has been addressed by upgrading to tcpdum...

CVE-2017-13041

CVE-2017-13041 concerns tcpdump’s ICMPv6 parser, where the icmp6_nodeinfo_print() function may read beyond a memory buffer in versions before 4.9.2. Affected software: tcpdump (network packet analyzer). Documented impact: buffer over-read that could lead to information disclosure or crash. CVSS d...

CVE-2017-13015

The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eapprint...

CVE-2017-13009

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...

CVE-2017-13028

The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootpprint...

CVE-2017-12985

The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6print...

CVE-2017-13006

CVE-2017-13006 affects tcpdump prior to 4.9.2, where the L2TP parser in print-l2tp.c has a buffer over-read/memory over-read issue in the L2TP component. This could allow a remote attacker to obtain sensitive information via crafted traffic over the network. The vulnerability is addressed by upgr...

CVE-2017-13046

tcpdump vulnerability CVE-2017-13046 is a buffer over-read in the BGP parser (bgp_attr_print in print-bgp.c) affecting tcpdump before version 4.9.2. This can allow a remote attacker to obtain sensitive information and may contribute to a memory-disclosure scenario. Public advisories (e.g., Debian...

CVE-2017-13026

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions...

CVE-2017-13038

The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handlemlppp...

CVE-2017-13025

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-13041

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6nodeinfoprint...

CVE-2017-13050

CVE-2017-13050 affects tcpdump up to version 4.9.2, due to a buffer over-read in the RPKI-Router parser (rpki_rtr_pdu_print in print-rpki-rtr.c). An attacker can trigger this remotely to obtain sensitive information from memory. The linked advisories list tcpdump fixes in 4.9.2 and note the RPKI-...