CVE-2017-13028

The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootpprint...

CVE-2017-13032

The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:printattrstring...

CVE-2017-12997

The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...

CVE-2017-13054

CVE-2017-13054 affects tcpdump and is a buffer over-read in the LLDP parser (print-lldp.c: lldp_private_8023_print()). The IBM AIX bulletin and Debian security notes confirm the vulnerability could allow a remote attacker to obtain sensitive information and cause information exposure via the LLDP...

CVE-2017-12992

CVE-2017-12992 affects tcpdump’s RIPng parser. A buffer over-read in print-ripng.c:ripng_print() could enable an attacker to read memory via a specially crafted RIPng packet. The advisories indicate tcpdump versions before 4.9.2 are vulnerable; upgrading to 4.9.2 or later fixes the issue. Other c...

CVE-2017-13014

CVE-2017-13014 relates to tcpdump prior to 4.9.2, where the White Board protocol parser (print-wb.c: wb_prep and related paths) has a buffer over-read/over-read condition. This could allow an attacker to access sensitive memory or information when processing crafted traffic. The affected product ...

CVE-2017-13002

The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodvextension...

CVE-2017-13000

CVE-2017-13000 affects tcpdump, specifically the IEEE 802.15.4 parser. The vulnerability is a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print(), which could allow a remote attacker to obtain sensitive information. The issue is fixed in tcpdump version 4.9.2 (as noted in the IBM AIX adv...

CVE-2017-12991

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...

CVE-2017-13040

CVE-2017-13040 affects tcpdump prior to 4.9.2. The MPTCP parser contains a buffer over-read in print-mptcp.c, which could allow a remote attacker to access sensitive information. The advisory notes this as a tcpdump vulnerability and indicates remediation by upgrading to tcpdump 4.9.2 (or later)....

CVE-2017-12894

Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookupbytestring...

CVE-2017-12894

tcpdump is vulnerable to a buffer over-read in addrtoname.c:lookup_bytestring() affecting multiple protocol parsers; impact includes potential information exposure. The issue was fixed by upgrading to tcpdump 4.9.2 (applies to affected releases). References point to the tcpdump commit and related...

CVE-2017-12894

Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookupbytestring...

CVE-2017-13030

CVE-2017-13030 refers to tcpdump before 4.9.2, which contains a buffer over-read in the PIM parser (print-pim.c). The affected component is the PIM multicast parser in tcpdump; the issue arises from reading past the end of a buffer, potentially enabling information disclosure or a crash. The CVSS...

CVE-2017-13030

The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions...

CVE-2017-13053

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodertroutinginfo...

CVE-2017-13046

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...

CVE-2017-12994

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...

CVE-2017-12896

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmprfc3948print...

CVE-2017-13034

CVE-2017-13034 : The tcpdump PGM parser has a vulnerability in print-pgm.c:pgm_print() that allows a buffer over-read in tcpdump versions before 4.9.2. This is a memory-read issue in the PGM component, potentially enabling information disclosure or application instability. The vulnerability is do...