6956 matches found
CVE-2017-13041
CVE-2017-13041 concerns tcpdump’s ICMPv6 parser, where the icmp6_nodeinfo_print() function may read beyond a memory buffer in versions before 4.9.2. Affected software: tcpdump (network packet analyzer). Documented impact: buffer over-read that could lead to information disclosure or crash. CVSS d...
CVE-2017-12985
The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6print...
CVE-2017-12897
The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclnsprint...
CVE-2017-13015
The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eapprint...
CVE-2017-13040
The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions...
CVE-2017-13006
CVE-2017-13006 affects tcpdump prior to 4.9.2, where the L2TP parser in print-l2tp.c has a buffer over-read/memory over-read issue in the L2TP component. This could allow a remote attacker to obtain sensitive information via crafted traffic over the network. The vulnerability is addressed by upgr...
CVE-2017-13020
tcpdump vulnerability CVE-2017-13020 is a buffer over-read in the VTP parser (vtp_print) of the tcpdump code path. It affects versions prior to 4.9.2 and can potentially lead to memory disclosure or crash scenarios as indicated by CVSS scores in public advisories. The canonical remediation is upg...
CVE-2017-12899
CVE-2017-12899 affects tcpdump DECnet parser; a buffer over-read in print-decnet.c decnet_print() could be triggered in versions before 4.9.2. Remediation: upgrade tcpdump to 4.9.2 or newer. Other references in Debian/IBM advisories corroborate tcpdump vulnerabilities fixed in this release.
CVE-2017-13032
CVE-2017-13032 affects tcpdump prior to 4.9.2, reporting a buffer over-read in print-radius.c:print_attr_string() of the RADIUS parser. The initial document confirms the issue as a memory read vulnerability that could leak information, with CVSSv3/base score components indicating high severity (C...
CVE-2017-13043
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodemulticastvpn...
CVE-2017-13043
The CVE-2017-13043 entry refers to tcpdump before 4.9.2, which has a buffer over-read in the BGP parser (print-bgp.c:decode_multicast_vpn). The connected advisories confirm multiple tcpdump issues in the 2017 timeframe and explicitly note that the fix is upgrading to tcpdump 4.9.2. In practice, t...
CVE-2017-13006
The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions...
CVE-2017-13037
The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintts...
CVE-2017-13048
The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...
CVE-2017-12994
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...
CVE-2017-13033
The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtpprint...
CVE-2017-13041
The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6nodeinfoprint...
CVE-2017-13019
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...