CVE-2017-13005

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xidmapenter...

CVE-2017-13022

tcpdump has a buffer over-read in print-ip.c:ip_printroute() (CVE-2017-13022). Debian's DSA-3971-1 and related advisories indicate the fix is in tcpdump 4.9.2 (and backported for various releases). Systems using tcpdump prior to 4.9.2 should upgrade to 4.9.2 or later to mitigate. The Debian advis...

CVE-2017-12988

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...

CVE-2017-13016

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...

CVE-2017-13054

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpprivate8023print...

CVE-2017-12997

The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...

CVE-2017-12986

The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6print...

CVE-2017-13027

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpmgmtaddrtlvprint...

CVE-2017-13032

The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:printattrstring...

CVE-2017-12987

tcpdump before 4.9.2 contains a buffer over-read in print-802_11.c:parse_elements(), affecting the IEEE 802.11 parser and enabling possible information disclosure. The CVE is CVE-2017-12987. Public sources describe the issue as a memory overread that could leak sensitive data from the affected pa...

CVE-2017-13009

CVE-2017-13009 : tcpdump before 4.9.2 contains a buffer over-read in print-mobility.c:mobility_print() within the IPv6 mobility parser. This could allow a remote attacker to access sensitive information via a crafted IPv6 mobility input. The issue is part of a family of tcpdump vulnerabilities an...

CVE-2017-13018

TCPDUMP vulnerability CVE-2017-13018: the PGM parser in tcpdump before 4.9.2 contains a buffer over-read in print-pgm.c:pgm_print(), potentially enabling a remote attacker to obtain sensitive information. Public advisories confirm the issue affects tcpdump and provide a fixed version: upgrade to ...

CVE-2017-12994

CVE-2017-12994 affects tcpdump prior to 4.9.2, with a buffer over-read in print-bgp.c:bgp_attr_print() within the BGP parser. The issue can allow an attacker to read memory and potentially disclose sensitive information. The available connected documents confirm the root cause and describe the fi...

CVE-2017-13044

CVE-2017-13044 describes a buffer over-read in the HNCP parser of tcpdump. Public sources in the connected documents confirm the issue resides in the print-hncp.c:dhcpv4_print() path and affect tcpdump prior to version 4.9.2. The available remediation in the connected Debian advisory and related ...

CVE-2017-12896

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmprfc3948print...

CVE-2017-13042

tcpdump before 4.9.2 has a buffer over-read in the HNCP parser (print-hncp.c:dhcpv6_print) that could allow a remote attacker to obtain sensitive information; fixed by updating to tcpdump 4.9.2.

CVE-2017-12991

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...

CVE-2017-13053

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodertroutinginfo...

CVE-2017-13050

The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpkirtrpduprint...

CVE-2017-13032

CVE-2017-13032 affects tcpdump prior to 4.9.2, reporting a buffer over-read in print-radius.c:print_attr_string() of the RADIUS parser. The initial document confirms the issue as a memory read vulnerability that could leak information, with CVSSv3/base score components indicating high severity (C...