CVE-2017-13019

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...

CVE-2017-12899

The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnetprint...

CVE-2017-13031

The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6print...

CVE-2017-12901

The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrpprint...

CVE-2017-13027

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpmgmtaddrtlvprint...

CVE-2017-12996

The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2print...

CVE-2017-13054

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpprivate8023print...

CVE-2017-13040

The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions...

CVE-2017-13690

CVE-2017-13690 affects tcpdump up to version 4.9.1 (before 4.9.2). The vulnerability is a buffer over-read in the IKEv2 parser, specifically in the print-isakmp.c functions, which could allow a network attacker to obtain sensitive information. The CVSS3 score is reported as 9.8 (CRITICAL); attack...

CVE-2017-12988

CVE-2017-12988 affects tcpdump prior to 4.9.2, due to a buffer over-read in telnet_parse() within print-telnet.c. This could allow a remote attacker to obtain sensitive information. The issue is fixed by upgrading to tcpdump 4.9.2 (as referenced in tcpdump advisory updates). If maintaining vulner...

CVE-2017-13039

CVE-2017-13039 affects tcpdump before 4.9.2, with a buffer over-read in the ISAKMP parser (print-isakmp.c). CNVD-2017-28270 describes this as a denial-of-service risk via memory read/overrun, potentially causing an application crash. The known remediation is upgrading to tcpdump 4.9.2 or later (a...

CVE-2017-12902

CVE-2017-12902 affects tcpdump (Zephyr parser) up to version 4.9.2. The vulnerability is a buffer over-read in print-zephyr.c that could lead to information exposure or a crash. Affected product: tcpdump (Zephyr parser) before 4.9.2. Root cause: buffer over-read in Zephyr parser. Impact (as per s...

CVE-2017-12992

The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripngprint...

CVE-2017-13012

CVE-2017-13012 affects tcpdump’s ICMP parser (print-icmp.c:icmp_print) with a buffer over-read in versions prior to 4.9.2. Multiple sources (NVD entry, Debian/DSA-3971-1, Ubuntu/USN-3415-1, IBM AIX advisory) confirm the flaw and that upgrading to tcpdump 4.9.2 (or applying the vendor patch) mitig...

CVE-2017-12896

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmprfc3948print...

CVE-2017-12902

The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions...

CVE-2017-13042

tcpdump before 4.9.2 has a buffer over-read in the HNCP parser (print-hncp.c:dhcpv6_print) that could allow a remote attacker to obtain sensitive information; fixed by updating to tcpdump 4.9.2.

CVE-2017-13053

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodertroutinginfo...

CVE-2017-13045

The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqpprint...

CVE-2017-13046

tcpdump vulnerability CVE-2017-13046 is a buffer over-read in the BGP parser (bgp_attr_print in print-bgp.c) affecting tcpdump before version 4.9.2. This can allow a remote attacker to obtain sensitive information and may contribute to a memory-disclosure scenario. Public advisories (e.g., Debian...