121 matches found
CVE-2017-13014
CVE-2017-13014 relates to tcpdump prior to 4.9.2, where the White Board protocol parser (print-wb.c: wb_prep and related paths) has a buffer over-read/over-read condition. This could allow an attacker to access sensitive memory or information when processing crafted traffic. The affected product ...
CVE-2017-13049
The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubikprint...
Tcpdump BGP parser buffer overflow vulnerability (CNVD-2017-28250)
Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.BGP parser is one of the border gateway protocol parsers. A buffer...
Tcpdump PIM Parser Buffer Overflow Vulnerability
Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.PIM parser is one of the PIM multicast protocol parsers. A buffer...
Tcpdump Juniper protocols parser buffer overflow vulnerability (CNVD-2017-27747)
Tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.Juniper protocols parser is one of the Juniper protocols parsers. A...
CVE-2017-13014
The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wbprep, several functions...
PT-2017-12880
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the PPP parser, specifically in the handle mlppp function within print-ppp.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or lat...
DEBIAN-CVE-2016-7993
A bug in util-print.c:reltsprint in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM...
UBUNTU-CVE-2016-7930
The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llcprint...
Apache Subversion svn Protocol Parser Integer Overflow (CVE-2015-5259)
An integer overflow vulnerability exists in Apache Subversion. The vulnerability is due to a flaw in the svn protocol parser. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted requests that will be processed by the svnserve protocol...
Apache Subversion 1.9.x < 1.9.3 Buffer Overflow
Binary data 9069.prm...
subversion -- multiple vulnerabilities
Subversion Project reports: Remotely triggerable heap overflow and out-of-bounds read caused by integer overflow in the svn:// protocol parser. Remotely triggerable heap overflow and out-of-bounds read in moddavsvn caused by integer overflow when parsing skel-encoded request bodies...
Wireshark WCCP Parser Denial of Service Vulnerability
Wireshark is an open source protocol analysis program. A security vulnerability exists in the Wireshark WCCP parser that allows an attacker to exploit the vulnerability by submitting special messages to be parsed to crash the application...
Wireshark Protocol Parser Search Denial of Service Vulnerability
Wireshark is an open source protocol analysis program. Wireshark searches for security holes in the protocol processor, allowing attackers to exploit vulnerabilities to crash applications...
Wireshark Denial of Service Vulnerability (CNVD-2015-03485)
Wireshark is the most popular network protocol parser. A denial of service vulnerability exists in Wireshark version 1.12.x prior to 1.12.5 that allows remote attackers to cause a denial of service via a crafted message packet...
Wireshark WCP Dissector Denial of Service Vulnerability
Wireshark is an open source network protocol analysis tool. The Wireshark WCP parser epan/dissectors/packet-wcp.c fails to properly initialize data structures, allowing an attacker to exploit the vulnerability by submitting special messages to crash the application...
Wireshark DEC DNA Routing Protocol Parser Remote Denial of Service Vulnerability
Wireshark is an open source network protocol analysis tool. A remote denial of service vulnerability exists in the Wireshark DEC DNA Routing Protocol parser, which can be exploited by an attacker to crash an affected application and deny service to legitimate users...
Wireshark LPP Parser Remote Denial of Service Vulnerability
Wireshark is an open source network protocol analysis tool. A remote denial of service vulnerability exists in the Wireshark LPP parser because it fails to properly handle certain types of packets. An attacker can exploit this vulnerability to crash the affected application and deny service to...
Portable SDK for UPnP Devices libupnp Root Device Service Name Stack Buffer Overflow (CVE-2012-5960)
A stack buffer overflow vulnerability exists in Intel's SDK for UPnP and the Portable SDK for UPnP. The vulnerability is due to a boundary error while parsing service name URIs in the function called from the SSDP protocol parser. A remote attacker can exploit this vulnerability to execute...