CVE-2017-12989

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:respgetlength...

CVE-2017-12990

The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions...

CVE-2017-13004

The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniperparseheader...

CVE-2017-13013

The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions...

CVE-2017-13014

The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wbprep, several functions...

CVE-2017-13045

The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqpprint...

CVE-2017-13689

The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1idprint...

CVE-2017-13036

The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6decodev3...

CVE-2017-13042

The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6print...

CVE-2017-13053

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodertroutinginfo...

CVE-2017-13690

The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions...

CVE-2017-13026

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions...

CVE-2017-13048

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...

CVE-2017-12899

CVE-2017-12899 affects tcpdump DECnet parser; a buffer over-read in print-decnet.c decnet_print() could be triggered in versions before 4.9.2. Remediation: upgrade tcpdump to 4.9.2 or newer. Other references in Debian/IBM advisories corroborate tcpdump vulnerabilities fixed in this release.

CVE-2017-13020

tcpdump vulnerability CVE-2017-13020 is a buffer over-read in the VTP parser (vtp_print) of the tcpdump code path. It affects versions prior to 4.9.2 and can potentially lead to memory disclosure or crash scenarios as indicated by CVSS scores in public advisories. The canonical remediation is upg...

CVE-2017-13040

The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions...

CVE-2017-13024

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-13009

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...

CVE-2017-13043

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodemulticastvpn...

CVE-2017-13032

CVE-2017-13032 affects tcpdump prior to 4.9.2, reporting a buffer over-read in print-radius.c:print_attr_string() of the RADIUS parser. The initial document confirms the issue as a memory read vulnerability that could leak information, with CVSSv3/base score components indicating high severity (C...