CVE-2017-13026

CVE-2017-13026 affects the tcpdump ISO IS-IS parser. The vulnerability is a buffer over-read in print-isoclns.c, present in tcpdump versions prior to 4.9.2. Upgrading to tcpdump 4.9.2 (or later) is the remediation. Public sources (Debian/CNVD/etc.) confirm the issue and the fix timeline; exploita...

CVE-2017-12895

The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...

CVE-2017-13038

tcpdump CVE-2017-13038: A buffer over-read in the PPP parser (print-ppp.c handle_mlppp) affects tcpdump versions before 4.9.2. The issue can enable information disclosure and potential crash. Affected component: PPP parser in tcpdump; root cause: out-of-bounds read in PPP handling. Impact per CVS...

CVE-2017-13008

The CVE-2017-13008 entry is valid and supported by connected documents. It affects tcpdump prior to 4.9.2, where the IEEE 802.11 parser (print-802_11.c:parse_elements) has a buffer over-read vulnerability. An attacker could potentially exploit this via crafted traffic to obtain sensitive informat...

CVE-2017-12993

The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions...

CVE-2017-13037

The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintts...

CVE-2017-13018

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...

CVE-2017-12902

The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions...

CVE-2017-12993

CVE-2017-12993 affects tcpdump prior to 4.9.2, where the Juniper protocols parser in print-juniper.c contains a buffer over-read. The vulnerability could allow a remote attacker to obtain sensitive information via crafted input, as described in the initial document. The CVE is associated with tcp...

CVE-2017-13012

The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...

CVE-2017-12895

The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...

CVE-2017-13055

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintisreachsubtlv...

CVE-2017-12897

The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclnsprint...

CVE-2017-13025

CVE-2017-13025 affects tcpdump: the IPv6 mobility parser contains a buffer over-read in mobility_opt_print() prior to version 4.9.2. The vulnerability could allow memory disclosure due to over-read; affected products are tcpdump builds before 4.9.2. Mitigation as documented in multiple advisories...

CVE-2017-13025

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-13025

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-13025

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-12895

The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...

CVE-2017-12901

The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrpprint...

CVE-2017-12999

tcpdump contains a buffer over-read in the IS-IS parser (print-isoclns.c:isis_print) affecting the tcpdump project; CVE-2017-12999 is documented in multiple advisories. Publicly disclosed details show the issue exists in tcpdump prior to version 4.9.2 and has been addressed by upgrading to tcpdum...