CVE-2017-13689

The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1idprint...

CVE-2017-13007

CVE-2017-13007 affects tcpdump prior to 4.9.2. The Apple PKTAP parser can over-read a buffer in print-pktap.c:pktap_if_print(), potentially enabling a crash or partial data exposure. The issue is mitigated by upgrading tcpdump to version 4.9.2 or later (as reflected in multiple advisories). The p...

CVE-2017-13003

CVE-2017-13003 affects tcpdump prior to 4.9.2, where the LMP parser’s lmp_print() could read memory beyond bounds (buffer over-read). This vulnerability may enable an attacker to obtain sensitive information or crash the application when parsing LMP data. The issue is resolved by upgrading to tcp...

CVE-2017-13002

tcpdump 4.x before 4.9.2 contains a buffer over-read in the AODV parser (print-aodv.c:aodv_extension). This is CVE-2017-13002. The issue stems from reading memory beyond bounds in the AODV extension handling, which could crash the application or cause memory disclosure. Fix: upgrade tcpdump to 4....

CVE-2017-13001

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfsprintfh...

CVE-2017-13021

tcpdump's ICMPv6 parser (icmp6_print) contains a buffer over-read in versions prior to 4.9.2, which could allow a remote attacker to obtain sensitive information or crash the application. Upgrade to tcpdump 4.9.2 or later to remediate.

CVE-2017-13019

CVE-2017-13019 affects tcpdump prior to version 4.9.2. The vulnerability is a buffer over-read in the PGM parser’s print-pgm.c:pgm_print() function, allowing a remote attacker to potentially obtain sensitive information or crash the application. Public sources in the connected documents consisten...

CVE-2017-13022

The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintroute...

CVE-2017-12895

The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...

CVE-2017-13025

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-13023

tcpdump before 4.9.2 is affected by a buffer over-read in the IPv6 mobility parser (print-mobility.c: mobility_opt_print). CVE-2017-13023 is documented with high-severity impact and information disclosure potential; remediation is to upgrade tcpdump to 4.9.2 or later. Public advisories summarize ...

CVE-2017-13041

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6nodeinfoprint...

CVE-2017-12897

CVE-2017-12897 affects tcpdump. The ISO CLNS parser has a buffer over-read in print-isoclns.c:isoclns_print, exploitable via network access. CVSSv3 base score 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Consequences include potential data disclosure or crash, as detailed in public adviso...

CVE-2017-13725

CVE-2017-13725 affects tcpdump, with a buffer over-read in IPv6 routing header parser (print-rt6.c:rt6_print) mitigated by upgrading to tcpdump 4.9.2. The vulnerability could enable information disclosure or trigger a crash due to memory handling weaknesses in the IPv6 routing header path. Remedi...

CVE-2017-12901

This CVE concerns tcpdump's EIGRP parser. A buffer over-read in print-eigrp.c:eigrp_print() affects tcpdump before version 4.9.2, enabling a remote attacker to potentially access sensitive information. The issue is mitigated by upgrading to tcpdump 4.9.2 or later, which contains the fix. If upgra...

CVE-2017-13028

CVE-2017-13028 (tcpdump) affects tcpdump prior to 4.9.2, describing a buffer over-read in the BOOTP parser (print-bootp.c:bootp_print()). The connected Debian/DSA advisories and upstream tcpdump notes confirm the issue and list 4.9.2 as the fix. Remediation: upgrade tcpdump to version 4.9.2 or la...

CVE-2017-13040

CVE-2017-13040 affects tcpdump prior to 4.9.2. The MPTCP parser contains a buffer over-read in print-mptcp.c, which could allow a remote attacker to access sensitive information. The advisory notes this as a tcpdump vulnerability and indicates remediation by upgrading to tcpdump 4.9.2 (or later)....

CVE-2017-13010

The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:lstrnstart...

CVE-2017-12899

The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnetprint...

CVE-2017-13055

CVE-2017-13055 affects tcpdump prior to 4.9.2. Root cause: a buffer over-read in the ISO IS-IS parser (print-isoclns.c:isis_print_is_reach_subtlv). Impact: potential information disclosure and partial/total memory exposure as indicated by CVSS 3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base 9.8, CR...