CVE-2017-13009: Out-of-bounds Read

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...

CVE-2017-13025: Out-of-bounds Read

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-13023: Out-of-bounds Read

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

UBUNTU-CVE-2017-13023

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-13024

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-13025

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-13009

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...

UBUNTU-CVE-2017-13025

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

UBUNTU-CVE-2017-13009

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...

UBUNTU-CVE-2017-13024

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-13023

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

PT-2017-12867

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the IPv6 mobility parser, specifically in the mobility opt print function within the print-mobility.c file. Recommendations For versions prior to 4.9.2,...

PT-2017-12866

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the IPv6 mobility parser, specifically in the mobility opt print function within the print-mobility.c file. Recommendations For versions prior to 4.9.2,...

PT-2017-12849

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue concerns a buffer over-read in the IPv6 mobility parser, specifically in the mobility print function within print-mobility.c. This could allow a remote attacker to obtain sensitive...

PT-2017-12865

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the IPv6 mobility parser, specifically in the mobility opt print function within the print-mobility.c file. Recommendations For versions prior to 4.9.2,...

Logic design flaws in Link Travel App

Liancheng Mobility APP is a time-sharing O2O model of new energy vehicle mobility mobile products. There is a logical design loophole in Liancheng Mobility APP. After logging in to the system, an attacker can arbitrarily register users and change their passwords and perform unauthorized operation...

PT-2017-17321

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client Software version 98.8940 Description The issue is related to the WebLaunch functionality, which contains a flaw that could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS...

CVE-2017-6788: Improper Neutralization of Input During Web Page Generation

The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected software. The vulnerability is due to insufficient input...

tcpdump: IPv6 mobility printer mobility_opt_print() typecastimg/signedness error

Integer signedness error in the mobilityoptprint function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service out-of-bounds read and crash or possibly execute arbitrary code via a negative length value...

CVE-2017-6638: Improper Input Validation

A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and run an executable file with privileges equivalent to the Microsoft Windows SYSTEM account. The vulnerability is due to incomplete input...