6956 matches found
CVE-2017-12897
CVE-2017-12897 affects tcpdump. The ISO CLNS parser has a buffer over-read in print-isoclns.c:isoclns_print, exploitable via network access. CVSSv3 base score 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Consequences include potential data disclosure or crash, as detailed in public adviso...
CVE-2017-13028
CVE-2017-13028 (tcpdump) affects tcpdump prior to 4.9.2, describing a buffer over-read in the BOOTP parser (print-bootp.c:bootp_print()). The connected Debian/DSA advisories and upstream tcpdump notes confirm the issue and list 4.9.2 as the fix. Remediation: upgrade tcpdump to version 4.9.2 or la...
CVE-2017-13046
tcpdump vulnerability CVE-2017-13046 is a buffer over-read in the BGP parser (bgp_attr_print in print-bgp.c) affecting tcpdump before version 4.9.2. This can allow a remote attacker to obtain sensitive information and may contribute to a memory-disclosure scenario. Public advisories (e.g., Debian...
CVE-2017-13690
The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions...
CVE-2017-13689
The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1idprint...
CVE-2017-13039
CVE-2017-13039 affects tcpdump before 4.9.2, with a buffer over-read in the ISAKMP parser (print-isakmp.c). CNVD-2017-28270 describes this as a denial-of-service risk via memory read/overrun, potentially causing an application crash. The known remediation is upgrading to tcpdump 4.9.2 or later (a...
CVE-2017-13028
The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootpprint...
CVE-2017-13689
The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1idprint...
CVE-2017-13688
The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsrprint...
CVE-2017-13690
CVE-2017-13690 affects tcpdump up to version 4.9.1 (before 4.9.2). The vulnerability is a buffer over-read in the IKEv2 parser, specifically in the print-isakmp.c functions, which could allow a network attacker to obtain sensitive information. The CVSS3 score is reported as 9.8 (CRITICAL); attack...
CVE-2017-12902
The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions...
CVE-2017-13025
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...
CVE-2017-13040
CVE-2017-13040 affects tcpdump prior to 4.9.2. The MPTCP parser contains a buffer over-read in print-mptcp.c, which could allow a remote attacker to access sensitive information. The advisory notes this as a tcpdump vulnerability and indicates remediation by upgrading to tcpdump 4.9.2 (or later)....
CVE-2017-13041
The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6nodeinfoprint...
CVE-2017-13001
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfsprintfh...
CVE-2017-13040
The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions...
CVE-2017-12901
This CVE concerns tcpdump's EIGRP parser. A buffer over-read in print-eigrp.c:eigrp_print() affects tcpdump before version 4.9.2, enabling a remote attacker to potentially access sensitive information. The issue is mitigated by upgrading to tcpdump 4.9.2 or later, which contains the fix. If upgra...
CVE-2017-12996
The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2print...
CVE-2017-12996
CVE-2017-12996 concerns tcpdump’s PIMv2 parser, where a buffer over-read in pimv2_print() could allow an attacker to obtain sensitive information. The vulnerability is in tcpdump before 4.9.2 and is classified as high severity (CVSS v3 base 9.8; network vector, no auth required). The documented r...
