8359 matches found
CVE-2017-12902
The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions...
CVE-2017-13041
CVE-2017-13041 concerns tcpdump’s ICMPv6 parser, where the icmp6_nodeinfo_print() function may read beyond a memory buffer in versions before 4.9.2. Affected software: tcpdump (network packet analyzer). Documented impact: buffer over-read that could lead to information disclosure or crash. CVSS d...
CVE-2017-12995
The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...
CVE-2017-13051
The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...
CVE-2017-12999
tcpdump contains a buffer over-read in the IS-IS parser (print-isoclns.c:isis_print) affecting the tcpdump project; CVE-2017-12999 is documented in multiple advisories. Publicly disclosed details show the issue exists in tcpdump prior to version 4.9.2 and has been addressed by upgrading to tcpdum...
CVE-2017-13013
CVE-2017-13013 is a tcpdump vulnerability described in IBM AIX advisory: the ARP parser contains a buffer over-read in print-arp.c, affecting tcpdump versions prior to 4.9.2. The vulnerability can allow a remote attacker to obtain sensitive information due to memory overread in the ARP path. The ...
CVE-2017-13024
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...
CVE-2017-13046
tcpdump vulnerability CVE-2017-13046 is a buffer over-read in the BGP parser (bgp_attr_print in print-bgp.c) affecting tcpdump before version 4.9.2. This can allow a remote attacker to obtain sensitive information and may contribute to a memory-disclosure scenario. Public advisories (e.g., Debian...
CVE-2017-12996
The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2print...
CVE-2017-12996
CVE-2017-12996 concerns tcpdump’s PIMv2 parser, where a buffer over-read in pimv2_print() could allow an attacker to obtain sensitive information. The vulnerability is in tcpdump before 4.9.2 and is classified as high severity (CVSS v3 base 9.8; network vector, no auth required). The documented r...
CVE-2017-12996
The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2print...
CVE-2017-13001
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfsprintfh...
CVE-2017-13002
The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodvextension...
CVE-2017-12901
The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrpprint...
CVE-2017-12901
This CVE concerns tcpdump's EIGRP parser. A buffer over-read in print-eigrp.c:eigrp_print() affects tcpdump before version 4.9.2, enabling a remote attacker to potentially access sensitive information. The issue is mitigated by upgrading to tcpdump 4.9.2 or later, which contains the fix. If upgra...
CVE-2017-13725
The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6print...
CVE-2017-13049
The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubikprint...
CVE-2017-12899
The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnetprint...