4550 matches found
CVE-2017-13038
The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handlemlppp...
CVE-2017-13049
The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubikprint...
CVE-2017-12899
The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnetprint...
CVE-2017-13689
The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1idprint...
CVE-2017-13041
The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6nodeinfoprint...
CVE-2017-13023
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...
CVE-2017-13023
tcpdump before 4.9.2 is affected by a buffer over-read in the IPv6 mobility parser (print-mobility.c: mobility_opt_print). CVE-2017-13023 is documented with high-severity impact and information disclosure potential; remediation is to upgrade tcpdump to 4.9.2 or later. Public advisories summarize ...
CVE-2017-13011
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2strinternal...
CVE-2017-13687
The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlcprint...
CVE-2017-13048
The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...
CVE-2017-13029
CVE-2017-13029 affects tcpdump prior to 4.9.2, due to a buffer over-read in the PPP parser (print_ccp_config_options). An attacker could potentially obtain sensitive information by sending a crafted packet. A fix is available in tcpdump 4.9.2 (e.g., Debian/DSA-3971-1). Validation details and patc...
CVE-2017-13012
CVE-2017-13012 affects tcpdump’s ICMP parser (print-icmp.c:icmp_print) with a buffer over-read in versions prior to 4.9.2. Multiple sources (NVD entry, Debian/DSA-3971-1, Ubuntu/USN-3415-1, IBM AIX advisory) confirm the flaw and that upgrading to tcpdump 4.9.2 (or applying the vendor patch) mitig...
CVE-2017-13039
CVE-2017-13039 affects tcpdump before 4.9.2, with a buffer over-read in the ISAKMP parser (print-isakmp.c). CNVD-2017-28270 describes this as a denial-of-service risk via memory read/overrun, potentially causing an application crash. The known remediation is upgrading to tcpdump 4.9.2 or later (a...
CVE-2017-13043
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodemulticastvpn...
CVE-2017-13022
The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintroute...
CVE-2017-13055
CVE-2017-13055 affects tcpdump prior to 4.9.2. Root cause: a buffer over-read in the ISO IS-IS parser (print-isoclns.c:isis_print_is_reach_subtlv). Impact: potential information disclosure and partial/total memory exposure as indicated by CVSS 3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base 9.8, CR...
CVE-2017-12893
CVE-2017-12893 affects tcpdump prior to 4.9.2. The issue is a buffer over-read in the SMB/CIFS parser (smbutil.c:name_len()), enabling a remote attacker to potentially read memory and disclose information. - Affected product: tcpdump (packet analyzer). - Vulnerable component: SMB/CIFS parsing. - ...
CVE-2017-13040
The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions...
CVE-2017-13035
CVE-2017-13035 affects tcpdump’s ISO IS-IS parser. The issue is a buffer over-read in print-isoclns.c:isis_print_id() for tcpdump versions before 4.9.2, potentially allowing disclosure of sensitive information. Remediation: upgrade tcpdump to 4.9.2 or later. If upgrading is not possible, consult ...