CVE-2018-7325

CVE-2018-7325 affects Wireshark 2.4.x and 2.2.x. The flaw is in epan/dissectors/packet-rpki-rtr.c where an infinite loop could be triggered by malformed data; it was addressed by validating a length field. Affected products include Wireshark 2.4.0–2.4.4 and 2.2.0–2.2.12. Impact is denial of servi...

CVE-2018-6193

A Cross-Site Scripting XSS vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to cgi-bin/routers2.pl...

CVE-2017-13050

CVE-2017-13050 affects tcpdump up to version 4.9.2, due to a buffer over-read in the RPKI-Router parser (rpki_rtr_pdu_print in print-rpki-rtr.c). An attacker can trigger this remotely to obtain sensitive information from memory. The linked advisories list tcpdump fixes in 4.9.2 and note the RPKI-...

Tcpdump RPKI-Router Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.RPKI-Router parser is one of the PUBLIC RESOURCE SECRET KEY...

CVE-2015-2153

The rpkirtrpduprint function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via a crafted header length in an RPKI-RTR Protocol Data Unit PDU...

CVE-2015-2153

The rpkirtrpduprint function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via a crafted header length in an RPKI-RTR Protocol Data Unit PDU...

Out-of-bounds

The rpkirtrpduprint function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via a crafted header length in an RPKI-RTR Protocol Data Unit PDU...

CVE-2015-2153

CVE-2015-2153 affects tcpdump before 4.7.2, where the rpki_rtr_pdu_print function in print-rpki-rtr.c mishandles header lengths in RPKI-RTR PDUs, allowing remote attackers to trigger denial of service via out-of-bounds reads/writes and crash the process; CNVD notes potential for arbitrary code ex...

CVE-2015-2153

The rpkirtrpduprint function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via a crafted header length in an RPKI-RTR Protocol Data Unit PDU...

UBUNTU-CVE-2015-2153

The rpkirtrpduprint function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via a crafted header length in an RPKI-RTR Protocol Data Unit PDU...

Cisco IOS Software Processing of SAA Packets - Cisco Systems (Deprecated)

The Service Assurance Agent SAA is the new name for the Response Time Reporter RTR feature. The router is vulnerable only if the RTR responder is enabled. When the router receives a malformed RTR packet, it will crash. RTR is disabled by default. Although RTR was introduced in Cisco IOS Software...

CVE-2003-0305

Cisco IOS SAA (formerly RTR) vulnerabilities affect IOS versions 12.0–12.2 where the Service Assurance Agent can crash when processing malformed Response Time Responder packets sent to UDP port 1967. The root cause is a malformed RTR packet causing a crash in the RTR/SAA path; exploitation requir...

Cisco IOS SAA Malformed RTR Packet DoS (CSCdx17916, CSCdx61997)

It is possible to crash the remote router by sending malformed Response Time Responder RTR packets. For this flaw to be exploitable, the router needs to have RTR responder enabled. This bug is referenced as CISCO bug id CSCdx17916 and CSCdx61997. %NASLMINLEVEL 999999 C Tenable Network Security,...