CVE-2017-13006

The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions...

CVE-2017-13013

The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions...

CVE-2017-13047

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...

CVE-2017-13042

The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6print...

CVE-2017-13028

The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootpprint...

CVE-2017-13002

The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodvextension...

CVE-2017-12995

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...

CVE-2017-13000

CVE-2017-13000 affects tcpdump, specifically the IEEE 802.15.4 parser. The vulnerability is a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print(), which could allow a remote attacker to obtain sensitive information. The issue is fixed in tcpdump version 4.9.2 (as noted in the IBM AIX adv...

CVE-2017-13053

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodertroutinginfo...

CVE-2017-13035

CVE-2017-13035 affects tcpdump’s ISO IS-IS parser. The issue is a buffer over-read in print-isoclns.c:isis_print_id() for tcpdump versions before 4.9.2, potentially allowing disclosure of sensitive information. Remediation: upgrade tcpdump to 4.9.2 or later. If upgrading is not possible, consult ...

CVE-2017-13020

The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtpprint...

CVE-2017-13688

CVE-2017-13688 affects tcpdump’s OLSR parser. The vulnerability is a buffer over-read in print-olsr.c:olsr_print() in tcpdump versions prior to 4.9.2. Public advisories (IBM AIX tcpdump advisory and Debian DSA) confirm the OLSR-related issue and note fixes in tcpdump 4.9.2. Remediation: upgrade t...

CVE-2017-13030

CVE-2017-13030 refers to tcpdump before 4.9.2, which contains a buffer over-read in the PIM parser (print-pim.c). The affected component is the PIM multicast parser in tcpdump; the issue arises from reading past the end of a buffer, potentially enabling information disclosure or a crash. The CVSS...

CVE-2017-13019

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...

CVE-2017-13021

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6print...

CVE-2017-13034

CVE-2017-13034 : The tcpdump PGM parser has a vulnerability in print-pgm.c:pgm_print() that allows a buffer over-read in tcpdump versions before 4.9.2. This is a memory-read issue in the PGM component, potentially enabling information disclosure or application instability. The vulnerability is do...

CVE-2017-13010

CVE-2017-13010 affects tcpdump and its BEEP parser: a buffer overread in print-beep.c:l_strnstart() could enable reading memory beyond bounds. Public listings (NVD, CVE databases, Debian advisories) confirm a tcpdump 4.9.2 fix exists; upgrade to 4.9.2 or later to mitigate. Connected sources also ...

CVE-2017-13005

CVE-2017-13005 concerns tcpdump’s NFS parser. A buffer over-read in print-nfs.c:xid_map_enter() affects tcpdump prior to 4.9.2, enabling potential information disclosure. The entry is supported by multiple advisories (e.g., Debian DSA-3971-1 and USN-3415-1) confirming a tcpdump vulnerability with...

CVE-2017-13053

CVE-2017-13053 affects tcpdump prior to 4.9.2, due to a buffer over-read in the BGP parser (print-bgp.c:decode_rt_routing_info). The issue is in tcpdump’s BGP decoding path and upgraded builds (tcpdump 4.9.2 or later) are issued as the fix per linked advisories; exploitation details are not expli...

CVE-2017-13054

CVE-2017-13054 affects tcpdump and is a buffer over-read in the LLDP parser (print-lldp.c: lldp_private_8023_print()). The IBM AIX bulletin and Debian security notes confirm the vulnerability could allow a remote attacker to obtain sensitive information and cause information exposure via the LLDP...