3979 matches found
CVE-2017-13014
The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wbprep, several functions...
CVE-2017-12988
The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...
CVE-2017-13017
The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6optprint...
CVE-2017-13051
The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...
CVE-2017-12990
The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions...
CVE-2017-13037
The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintts...
CVE-2017-13037
CVE-2017-13037 concerns tcpdump prior to 4.9.2, where the IP parser in print-ip.c:ip_printts() has a buffer overread. It could allow a remote attacker to obtain sensitive information. Public advisories confirm fixes in tcpdump 4.9.2 and later; Debian also lists this as addressed in DSA-3971-1. Im...
CVE-2017-13013
CVE-2017-13013 is a tcpdump vulnerability described in IBM AIX advisory: the ARP parser contains a buffer over-read in print-arp.c, affecting tcpdump versions prior to 4.9.2. The vulnerability can allow a remote attacker to obtain sensitive information due to memory overread in the ARP path. The ...
CVE-2017-13024
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...
CVE-2017-13014
CVE-2017-13014 relates to tcpdump prior to 4.9.2, where the White Board protocol parser (print-wb.c: wb_prep and related paths) has a buffer over-read/over-read condition. This could allow an attacker to access sensitive memory or information when processing crafted traffic. The affected product ...
CVE-2017-13033
CVE-2017-13033 affects tcpdump prior to 4.9.2, where the VTP parser in print-vtp.c:vtp_print() can perform a buffer over-read. This can lead to information disclosure or crash over the network. The vulnerability is tied to the VTP component of tcpdump, with CVSS data indicating high severity (CVS...
CVE-2017-12995
CVE-2017-12995 affects tcpdump’s DNS parser. A bug in print-domain.c:ns_print() could cause an infinite loop when parsing certain DNS data. The issue is fixed in tcpdump version 4.9.2; remediation is to upgrade to 4.9.2 or later. Other related advisories in connected documents confirm tcpdump vul...
CVE-2017-12901
The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrpprint...
CVE-2017-12988
The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...
CVE-2017-12995
The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...
CVE-2017-13011
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2strinternal...
CVE-2017-13023
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...
CVE-2017-13022
The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintroute...