3979 matches found
CVE-2017-13026
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions...
CVE-2017-12998
The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintextdipreach...
CVE-2017-13045
The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqpprint...
CVE-2017-13003
The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...
CVE-2017-12899
CVE-2017-12899 affects tcpdump DECnet parser; a buffer over-read in print-decnet.c decnet_print() could be triggered in versions before 4.9.2. Remediation: upgrade tcpdump to 4.9.2 or newer. Other references in Debian/IBM advisories corroborate tcpdump vulnerabilities fixed in this release.
CVE-2017-12989
The CVE-2017-12989 issue affects tcpdump before 4.9.2, where the RESP parser (print-resp.c:resp_get_length()) could enter an infinite loop, enabling a denial of service. Public sources show CVSSv3 base 7.5 (HIGH) with network access, low attack complexity, no authentication, and availability impa...
CVE-2017-13041
CVE-2017-13041 concerns tcpdump’s ICMPv6 parser, where the icmp6_nodeinfo_print() function may read beyond a memory buffer in versions before 4.9.2. Affected software: tcpdump (network packet analyzer). Documented impact: buffer over-read that could lead to information disclosure or crash. CVSS d...
CVE-2017-12894
tcpdump is vulnerable to a buffer over-read in addrtoname.c:lookup_bytestring() affecting multiple protocol parsers; impact includes potential information exposure. The issue was fixed by upgrading to tcpdump 4.9.2 (applies to affected releases). References point to the tcpdump commit and related...
CVE-2017-12897
The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclnsprint...
CVE-2017-12893
CVE-2017-12893 affects tcpdump prior to 4.9.2. The issue is a buffer over-read in the SMB/CIFS parser (smbutil.c:name_len()), enabling a remote attacker to potentially read memory and disclose information. - Affected product: tcpdump (packet analyzer). - Vulnerable component: SMB/CIFS parsing. - ...
CVE-2017-12894
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookupbytestring...
CVE-2017-12893
The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...
CVE-2017-12997
The CVE-2017-12997 entry concerns tcpdump’s LLDP parser. A bug in print-lldp.c:lldp_private_8021_print() could cause an infinite loop, enabling a denial-of-service condition. Affected product: tcpdump (versions before 4.9.2). Observed impact per the document: denial of service via infinite loop t...
CVE-2017-13001
CVE-2017-13001 affects tcpdump prior to 4.9.2 where the NFS parser in nfs_printfh() has a buffer over-read. Public sources (NVD entry for tcpdump 4.9.2 fix; Debian DSA-3971-1 and Debian LTS advisory; IBM AIX/tcpdump advisory) confirm the issue is in the NFS parser and fixed by updating to tcpdump...
CVE-2017-12997
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...
CVE-2017-12998
tcpdump before 4.9.2 has a buffer over-read in the IS-IS parser (print-isoclns.c:isis_print_extd_ip_reach) that could allow a remote attacker to obtain sensitive information; upgrade to tcpdump 4.9.2 or later to fix.
CVE-2017-13014
The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wbprep, several functions...
CVE-2017-12895
CVE-2017-12895 affects tcpdump prior to 4.9.2, describing a buffer over-read in the ICMP parser (print-icmp.c: icmp_print). This could allow a remote attacker to obtain sensitive information through crafted traffic. Mitigation: upgrade tcpdump to version 4.9.2 or newer; no other details (vectors,...