Debian: Security Advisory (DSA-3971-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware 13.37 / 14.0 / 14.1 / 14.2 / current : tcpdump (SSA:2017-251-03)

New tcpdump packages are available for Slackware 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2017-251-03. The text itself i...

CVE-2017-13049

The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubikprint...

tcprewrite - Heap Buffer Overflow

Title: tcprewrite Heap-Based Buffer Overflow CVE: CVE-2017-14266 CWE: CWE-122 Exploit Author: Hosein AskariFarazPajohan Vendor HomePage: http://tcpreplay.synfin.net/ Product Description: When you want to give a PCAP file to someone, it gives away certain sensitive information such as an...

MGASA-2017-0335 Updated tcpdump packages fix security vulnerabilities

Summary for 4.9.2 tcpdump release Do not use getprotobynumber for protocol name resolution. Do not do any protocol name resolution if -n is specified. Improve errors detection in the test scripts. Fix a segfault with OpenSSL 1.1 and improve OpenSSL usage. Clean up IS-IS printing. Fix buffer...

Updated tcpdump packages fix security vulnerabilities

Summary for 4.9.2 tcpdump release Do not use getprotobynumber for protocol name resolution. Do not do any protocol name resolution if -n is specified. Improve errors detection in the test scripts. Fix a segfault with OpenSSL 1.1 and improve OpenSSL usage. Clean up IS-IS printing. Fix buffer...

PT-2017-12840

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the IEEE 802.15.4 parser, specifically in the print-802 15 4.c:ieee802 15 4 if print function. This problem affects the tcpdump protocol analyzer...

PT-2017-12867

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the IPv6 mobility parser, specifically in the mobility opt print function within the print-mobility.c file. Recommendations For versions prior to 4.9.2,...

PT-2017-12831

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the RIPng parser, specifically in the ripng print function within print-ripng.c. This could allow a remote attacker to obtain sensitive information by...

PT-2017-12827

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue concerns a buffer over-read in the telnet parser, specifically in the telnet parse function within print-telnet.c. This could allow a remote attacker to obtain sensitive information by...

PT-2017-12842

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the AODV parser, specifically in the aodv extension function within print-aodv.c. This problem can lead to potential data exposure or crashes...

PT-2017-12844

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the Juniper protocols parser, specifically in the juniper parse header function within print-juniper.c. This affects the tcpdump protocol analyzer...

PT-2017-12760

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the DECnet parser. A remote attacker could obtain sensitive information by sending a specially crafted request to exploit this issue in the HNCP componen...

PT-2017-12851

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the BEEP parser, specifically in the l strnstart function within print-beep.c. This could allow a remote attacker to obtain sensitive information by...

PT-2017-12873

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue concerns a buffer over-read in the IPv6 fragmentation header parser, specifically within the frag6 print function in print-frag6.c. Recommendations For versions prior to 4.9.2, update to...

PT-2017-12835

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue concerns a buffer over-read in the PIMv2 parser, specifically within the pimv2 print function located in print-pim.c. This problem affects the tcpdump analyzer. Recommendations For versions...

PT-2017-12855

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue concerns a buffer over-read in the White Board protocol parser, specifically in the wb prep function within print-wb.c. This could allow a remote attacker to obtain sensitive information by...

PT-2017-12830

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue concerns a buffer over-read in the BGP parser component of tcpdump, specifically in the bgp attr print function within print-bgp.c. This could allow a remote attacker to obtain sensitive...

PT-2017-12858

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the DHCPv6 parser, specifically in the dhcp6opt print function within print-dhcp6.c. This could allow a remote attacker to obtain sensitive information b...

PT-2017-12886

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the BGP parser, specifically in the decode multicast vpn function within print-bgp.c. Recommendations For versions prior to 4.9.2, update to version 4.9....