3983 matches found
CVE-2017-13019
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...
CVE-2017-13021
The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6print...
CVE-2017-13017
The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6optprint...
CVE-2017-13036
CVE-2017-13036 affects tcpdump: the OSPFv3 parser in tcpdump before 4.9.2 has a memory over-read/overflow in print-ospf6.c:ospf6_decode_v3(), described in CNVD-2017-28273 as a buffer overflow in OSPFv3. This remote vulnerability could enable a crash or potential information leakage. The public de...
CVE-2017-13037
The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintts...
CVE-2017-13048
The CVE-2017-13048 entry affects tcpdump prior to 4.9.2, caused by a buffer over-read in print-rsvp.c:rsvp_obj_print() within the RSVP parser. Public advisories (Debian, Debian security tracker, and IBM AIX bulletin) confirm the issue and reference the same code path. Affected versions include tc...
CVE-2017-12995
CVE-2017-12995 affects tcpdump’s DNS parser. A bug in print-domain.c:ns_print() could cause an infinite loop when parsing certain DNS data. The issue is fixed in tcpdump version 4.9.2; remediation is to upgrade to 4.9.2 or later. Other related advisories in connected documents confirm tcpdump vul...
CVE-2017-13016
The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...
CVE-2017-13033
CVE-2017-13033 affects tcpdump prior to 4.9.2, where the VTP parser in print-vtp.c:vtp_print() can perform a buffer over-read. This can lead to information disclosure or crash over the network. The vulnerability is tied to the VTP component of tcpdump, with CVSS data indicating high severity (CVS...
CVE-2017-13025
CVE-2017-13025 affects tcpdump: the IPv6 mobility parser contains a buffer over-read in mobility_opt_print() prior to version 4.9.2. The vulnerability could allow memory disclosure due to over-read; affected products are tcpdump builds before 4.9.2. Mitigation as documented in multiple advisories...
CVE-2017-13000
CVE-2017-13000 affects tcpdump, specifically the IEEE 802.15.4 parser. The vulnerability is a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print(), which could allow a remote attacker to obtain sensitive information. The issue is fixed in tcpdump version 4.9.2 (as noted in the IBM AIX adv...
CVE-2017-12999
tcpdump contains a buffer over-read in the IS-IS parser (print-isoclns.c:isis_print) affecting the tcpdump project; CVE-2017-12999 is documented in multiple advisories. Publicly disclosed details show the issue exists in tcpdump prior to version 4.9.2 and has been addressed by upgrading to tcpdum...
CVE-2017-13013
CVE-2017-13013 is a tcpdump vulnerability described in IBM AIX advisory: the ARP parser contains a buffer over-read in print-arp.c, affecting tcpdump versions prior to 4.9.2. The vulnerability can allow a remote attacker to obtain sensitive information due to memory overread in the ARP path. The ...
CVE-2017-13006
The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions...
CVE-2017-12898
CVE-2017-12898 affects tcpdump before 4.9.2, where the NFS parser’s interp_reply() can perform a buffer over-read. This is a remote, network-exploitable condition tied to the NFS parser; the CVSS 3.x score is 9.8 (CRITICAL) with HIGH impact on confidentiality, integrity, and availability. Affecte...
CVE-2017-13050
CVE-2017-13050 affects tcpdump up to version 4.9.2, due to a buffer over-read in the RPKI-Router parser (rpki_rtr_pdu_print in print-rpki-rtr.c). An attacker can trigger this remotely to obtain sensitive information from memory. The linked advisories list tcpdump fixes in 4.9.2 and note the RPKI-...
CVE-2017-13688
CVE-2017-13688 affects tcpdump’s OLSR parser. The vulnerability is a buffer over-read in print-olsr.c:olsr_print() in tcpdump versions prior to 4.9.2. Public advisories (IBM AIX tcpdump advisory and Debian DSA) confirm the OLSR-related issue and note fixes in tcpdump 4.9.2. Remediation: upgrade t...
CVE-2017-12990
The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions...
CVE-2017-13030
CVE-2017-13030 refers to tcpdump before 4.9.2, which contains a buffer over-read in the PIM parser (print-pim.c). The affected component is the PIM multicast parser in tcpdump; the issue arises from reading past the end of a buffer, potentially enabling information disclosure or a crash. The CVSS...
