CVE-2017-13048

The CVE-2017-13048 entry affects tcpdump prior to 4.9.2, caused by a buffer over-read in print-rsvp.c:rsvp_obj_print() within the RSVP parser. Public advisories (Debian, Debian security tracker, and IBM AIX bulletin) confirm the issue and reference the same code path. Affected versions include tc...

CVE-2017-12995

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...

CVE-2017-12990

CVE-2017-12990 affects tcpdump’s ISAKMP parser (print-isakmp.c) and could cause an infinite loop, leading to a denial of service. The issue was fixed in tcpdump 4.9.2; users should upgrade to 4.9.2 or newer. Connected sources also document related tcpdump vulnerabilities in the same release famil...

CVE-2017-12999

tcpdump contains a buffer over-read in the IS-IS parser (print-isoclns.c:isis_print) affecting the tcpdump project; CVE-2017-12999 is documented in multiple advisories. Publicly disclosed details show the issue exists in tcpdump prior to version 4.9.2 and has been addressed by upgrading to tcpdum...

CVE-2017-13013

CVE-2017-13013 is a tcpdump vulnerability described in IBM AIX advisory: the ARP parser contains a buffer over-read in print-arp.c, affecting tcpdump versions prior to 4.9.2. The vulnerability can allow a remote attacker to obtain sensitive information due to memory overread in the ARP path. The ...

CVE-2017-13687

The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlcprint...

CVE-2017-13052

The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfmprint...

CVE-2017-13042

The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6print...

CVE-2017-13028

The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootpprint...

CVE-2017-12985

CVE-2017-12985 affects tcpdump’s IPv6 parser. The description in the CVE notes a buffer over-read in ip6_print() within print-ip6.c, and connected advisories confirm tcpdump before 4.9.2 is vulnerable. Impact is described as potential exposure via memory overread, with CVSS v3.0/3.1 vectors indic...

CVE-2017-13050

CVE-2017-13050 affects tcpdump up to version 4.9.2, due to a buffer over-read in the RPKI-Router parser (rpki_rtr_pdu_print in print-rpki-rtr.c). An attacker can trigger this remotely to obtain sensitive information from memory. The linked advisories list tcpdump fixes in 4.9.2 and note the RPKI-...

CVE-2017-12992

CVE-2017-12992 affects tcpdump’s RIPng parser. A buffer over-read in print-ripng.c:ripng_print() could enable an attacker to read memory via a specially crafted RIPng packet. The advisories indicate tcpdump versions before 4.9.2 are vulnerable; upgrading to 4.9.2 or later fixes the issue. Other c...

CVE-2017-12990

The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions...

CVE-2017-13006

The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions...

CVE-2017-13030

CVE-2017-13030 refers to tcpdump before 4.9.2, which contains a buffer over-read in the PIM parser (print-pim.c). The affected component is the PIM multicast parser in tcpdump; the issue arises from reading past the end of a buffer, potentially enabling information disclosure or a crash. The CVSS...

CVE-2017-13029

CVE-2017-13029 affects tcpdump prior to 4.9.2, due to a buffer over-read in the PPP parser (print_ccp_config_options). An attacker could potentially obtain sensitive information by sending a crafted packet. A fix is available in tcpdump 4.9.2 (e.g., Debian/DSA-3971-1). Validation details and patc...

CVE-2017-13034

CVE-2017-13034 : The tcpdump PGM parser has a vulnerability in print-pgm.c:pgm_print() that allows a buffer over-read in tcpdump versions before 4.9.2. This is a memory-read issue in the PGM component, potentially enabling information disclosure or application instability. The vulnerability is do...

CVE-2017-13020

The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtpprint...

CVE-2017-13010

CVE-2017-13010 affects tcpdump and its BEEP parser: a buffer overread in print-beep.c:l_strnstart() could enable reading memory beyond bounds. Public listings (NVD, CVE databases, Debian advisories) confirm a tcpdump 4.9.2 fix exists; upgrade to 4.9.2 or later to mitigate. Connected sources also ...

CVE-2017-13045

CVE-2017-13045 affects tcpdump prior to 4.9.2 via a buffer over-read in the VQP parser (print-vqp.c:vqp_print). This can potentially disclose information from memory due to a over-read in the VQP path. The CVSS vectors indicate a high-severity, network-exposed issue with substantial impact across...