667 matches found
CVE-2017-12997
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...
Code injection
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...
CVE-2017-12997
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...
CVE-2017-13054
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpprivate8023print...
CVE-2017-13027
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpmgmtaddrtlvprint...
CVE-2017-13027
The CVE-2017-13027 entry concerns tcpdump’s LLDP parser. A buffer over-read in print-lldp.c:lddp_mgmt_addr_tlv_print() affects tcpdump prior to version 4.9.2, potentially enabling information disclosure or faulting the application when processing LLDP data. The vulnerability is confirmed in offic...
CVE-2017-13027
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpmgmtaddrtlvprint...
CVE-2017-12997
The LLDP parser in tcpdump versions before 4.9.2 is vulnerable to a bug in print-lldp.c:lldp_private_8021_print(), which can cause the program to enter an infinite loop . While several security advisories and scanner plugins confirm this vulnerability, specific exploit details or in-the-wild expl...
CVE-2017-12997
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...
CVE-2017-13054
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpprivate8023print...
CVE-2017-13027
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpmgmtaddrtlvprint...
CVE-2017-13054
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpprivate8023print...
CVE-2017-13054
CVE-2017-13054 affects tcpdump and is a buffer over-read in the LLDP parser (print-lldp.c: lldp_private_8023_print()). The IBM AIX bulletin and Debian security notes confirm the vulnerability could allow a remote attacker to obtain sensitive information and cause information exposure via the LLDP...
CVE-2017-13054
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpprivate8023print...
CVE-2017-12997
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...
Tcpdump LLDP parser buffer overflow vulnerability (CNVD-2017-28239)
Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.LLDP parser is one of the link layer discovery protocol parsers. A...
CVE-2017-13027: Out-of-bounds Read
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpmgmtaddrtlvprint...
CVE-2017-12997: Loop with Unreachable Exit Condition
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...