4550 matches found
CVE-2017-12992
CVE-2017-12992 affects tcpdump’s RIPng parser. A buffer over-read in print-ripng.c:ripng_print() could enable an attacker to read memory via a specially crafted RIPng packet. The advisories indicate tcpdump versions before 4.9.2 are vulnerable; upgrading to 4.9.2 or later fixes the issue. Other c...
CVE-2017-13014
CVE-2017-13014 relates to tcpdump prior to 4.9.2, where the White Board protocol parser (print-wb.c: wb_prep and related paths) has a buffer over-read/over-read condition. This could allow an attacker to access sensitive memory or information when processing crafted traffic. The affected product ...
CVE-2017-13002
The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodvextension...
CVE-2017-13000
CVE-2017-13000 affects tcpdump, specifically the IEEE 802.15.4 parser. The vulnerability is a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print(), which could allow a remote attacker to obtain sensitive information. The issue is fixed in tcpdump version 4.9.2 (as noted in the IBM AIX adv...
CVE-2017-12991
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...
CVE-2017-13040
CVE-2017-13040 affects tcpdump prior to 4.9.2. The MPTCP parser contains a buffer over-read in print-mptcp.c, which could allow a remote attacker to access sensitive information. The advisory notes this as a tcpdump vulnerability and indicates remediation by upgrading to tcpdump 4.9.2 (or later)....
CVE-2017-12894
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookupbytestring...
CVE-2017-12894
tcpdump is vulnerable to a buffer over-read in addrtoname.c:lookup_bytestring() affecting multiple protocol parsers; impact includes potential information exposure. The issue was fixed by upgrading to tcpdump 4.9.2 (applies to affected releases). References point to the tcpdump commit and related...
CVE-2017-12894
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookupbytestring...
CVE-2017-13030
CVE-2017-13030 refers to tcpdump before 4.9.2, which contains a buffer over-read in the PIM parser (print-pim.c). The affected component is the PIM multicast parser in tcpdump; the issue arises from reading past the end of a buffer, potentially enabling information disclosure or a crash. The CVSS...
CVE-2017-13030
The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions...
CVE-2017-13053
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodertroutinginfo...
CVE-2017-13046
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...
CVE-2017-12994
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...
CVE-2017-12896
The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmprfc3948print...
CVE-2017-13034
CVE-2017-13034 : The tcpdump PGM parser has a vulnerability in print-pgm.c:pgm_print() that allows a buffer over-read in tcpdump versions before 4.9.2. This is a memory-read issue in the PGM component, potentially enabling information disclosure or application instability. The vulnerability is do...
CVE-2017-13010
CVE-2017-13010 affects tcpdump and its BEEP parser: a buffer overread in print-beep.c:l_strnstart() could enable reading memory beyond bounds. Public listings (NVD, CVE databases, Debian advisories) confirm a tcpdump 4.9.2 fix exists; upgrade to 4.9.2 or later to mitigate. Connected sources also ...
CVE-2017-12997
The LLDP parser in tcpdump versions before 4.9.2 is vulnerable to a bug in print-lldp.c:lldp_private_8021_print(), which can cause the program to enter an infinite loop . While several security advisories and scanner plugins confirm this vulnerability, specific exploit details or in-the-wild expl...
CVE-2017-13026
CVE-2017-13026 affects the tcpdump ISO IS-IS parser. The vulnerability is a buffer over-read in print-isoclns.c, present in tcpdump versions prior to 4.9.2. Upgrading to tcpdump 4.9.2 (or later) is the remediation. Public sources (Debian/CNVD/etc.) confirm the issue and the fix timeline; exploita...
