3979 matches found
CVE-2017-12895
CVE-2017-12895 affects tcpdump prior to 4.9.2, describing a buffer over-read in the ICMP parser (print-icmp.c: icmp_print). This could allow a remote attacker to obtain sensitive information through crafted traffic. Mitigation: upgrade tcpdump to version 4.9.2 or newer; no other details (vectors,...
CVE-2017-13034
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...
CVE-2017-13032
CVE-2017-13032 affects tcpdump prior to 4.9.2, reporting a buffer over-read in print-radius.c:print_attr_string() of the RADIUS parser. The initial document confirms the issue as a memory read vulnerability that could leak information, with CVSSv3/base score components indicating high severity (C...
CVE-2017-13024
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...
CVE-2017-13689
CVE-2017-13689 concerns tcpdump’s IKEv1 parser. The vulnerability is a buffer over-read in print-isakmp.c:ikev1_id_print() affecting tcpdump versions before 4.9.2. This could enable a remote attacker to obtain sensitive information from memory. Public details in connected sources confirm the vuln...
CVE-2017-13031
CVE-2017-13031 relates to tcpdump’s IPv6 fragmentation header parser, where a buffer over-read occurs in print-frag6.c:frag6_print() prior to version 4.9.2. The Initial Document confirms the flaw and notes the fix/update to 4.9.2. Connected documentation references multiple advisories and CVSS da...
CVE-2017-12999
The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprint...
CVE-2017-13039
The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions...
CVE-2017-13046
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...
CVE-2017-13010
The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:lstrnstart...
CVE-2017-13044
The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4print...
CVE-2017-13029
The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:printccpconfigoptions...
CVE-2017-12987
The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-80211.c:parseelements...
CVE-2017-12897
The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclnsprint...
CVE-2017-13040
The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions...
CVE-2017-13050
The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpkirtrpduprint...
CVE-2017-13002
The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodvextension...
CVE-2017-13035
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintid...
CVE-2017-13026
CVE-2017-13026 affects the tcpdump ISO IS-IS parser. The vulnerability is a buffer over-read in print-isoclns.c, present in tcpdump versions prior to 4.9.2. Upgrading to tcpdump 4.9.2 (or later) is the remediation. Public sources (Debian/CNVD/etc.) confirm the issue and the fix timeline; exploita...