3979 matches found
CVE-2017-13048
The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...
CVE-2017-13725
The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6print...
CVE-2017-12985
The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6print...
CVE-2017-12985
The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6print...
CVE-2017-13005
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xidmapenter...
CVE-2017-13038
tcpdump CVE-2017-13038: A buffer over-read in the PPP parser (print-ppp.c handle_mlppp) affects tcpdump versions before 4.9.2. The issue can enable information disclosure and potential crash. Affected component: PPP parser in tcpdump; root cause: out-of-bounds read in PPP handling. Impact per CVS...
CVE-2017-13027
The CVE-2017-13027 entry concerns tcpdump’s LLDP parser. A buffer over-read in print-lldp.c:lddp_mgmt_addr_tlv_print() affects tcpdump prior to version 4.9.2, potentially enabling information disclosure or faulting the application when processing LLDP data. The vulnerability is confirmed in offic...
CVE-2017-13688
The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsrprint...
CVE-2017-13011
tcpdump CVE-2017-13011 is a vulnerability in bittok2str_internal() that can cause a buffer overflow in multiple protocol parsers. The issue affects tcpdump releases prior to 4.9.2, and has been addressed by upgrading to tcpdump 4.9.2 (as reflected in Debian DSA-3971-1/DSA-3971-1, IBM AIX advisori...
CVE-2017-13038
The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handlemlppp...
CVE-2017-12987
tcpdump before 4.9.2 contains a buffer over-read in print-802_11.c:parse_elements(), affecting the IEEE 802.11 parser and enabling possible information disclosure. The CVE is CVE-2017-12987. Public sources describe the issue as a memory overread that could leak sensitive data from the affected pa...
CVE-2017-13009
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...
CVE-2017-13016
tcpdump (affected component: ISO ES-IS parser) has a buffer overread in esis_print() of print-isoclns.c, leading to potential information disclosure. Affected versions are prior to 4.9.2. Remediation: upgrade to tcpdump 4.9.2 or later. The issue is documented under CVE-2017-13016; other related C...
CVE-2017-13043
The CVE-2017-13043 entry refers to tcpdump before 4.9.2, which has a buffer over-read in the BGP parser (print-bgp.c:decode_multicast_vpn). The connected advisories confirm multiple tcpdump issues in the 2017 timeframe and explicitly note that the fix is upgrading to tcpdump 4.9.2. In practice, t...
CVE-2017-12989
The CVE-2017-12989 issue affects tcpdump before 4.9.2, where the RESP parser (print-resp.c:resp_get_length()) could enter an infinite loop, enabling a denial of service. Public sources show CVSSv3 base 7.5 (HIGH) with network access, low attack complexity, no authentication, and availability impa...
CVE-2017-12895
The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...
CVE-2017-12898
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interpreply...
CVE-2017-13000
The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802154.c:ieee802154ifprint...