Tcpdump IS-IS Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.IS-IS parser is one of the routing protocol parsers. A buffer overflow...

CVE-2017-13047: Out-of-bounds Read

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...

CVE-2017-12998: Out-of-bounds Read

The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintextdipreach...

CVE-2017-12999: Out-of-bounds Read

The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprint...

CVE-2017-13016: Out-of-bounds Read

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...

CVE-2017-13026: Out-of-bounds Read

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions...

CVE-2017-13055: Out-of-bounds Read

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintisreachsubtlv...

CVE-2017-13035: Out-of-bounds Read

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintid...

CVE-2017-13026

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions...

CVE-2017-13035

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintid...

CVE-2017-13047

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...

CVE-2017-12998

The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintextdipreach...

CVE-2017-12999

The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprint...

CVE-2017-13055

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintisreachsubtlv...

CVE-2017-13016

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...

UBUNTU-CVE-2017-13026

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions...

Updated tcpdump packages fix security vulnerabilities

Summary for 4.9.2 tcpdump release Do not use getprotobynumber for protocol name resolution. Do not do any protocol name resolution if -n is specified. Improve errors detection in the test scripts. Fix a segfault with OpenSSL 1.1 and improve OpenSSL usage. Clean up IS-IS printing. Fix buffer...

PT-2017-12857

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue concerns a buffer over-read in the ISO ES-IS parser, specifically in the esis print function within print-isoclns.c. This could allow a remote attacker to obtain sensitive information by...

PT-2017-12837

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the IS-IS parser, specifically in the isis print extd ip reach function within print-isoclns.c. This problem can lead to potential security issues...

PT-2017-12868

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the ISO IS-IS parser, specifically within the print-isoclns.c file, affecting several functions. Recommendations For versions prior to 4.9.2, update to...