CVE-2017-13029

CVE-2017-13029 affects tcpdump prior to 4.9.2, due to a buffer over-read in the PPP parser (print_ccp_config_options). An attacker could potentially obtain sensitive information by sending a crafted packet. A fix is available in tcpdump 4.9.2 (e.g., Debian/DSA-3971-1). Validation details and patc...

CVE-2017-13036

CVE-2017-13036 affects tcpdump: the OSPFv3 parser in tcpdump before 4.9.2 has a memory over-read/overflow in print-ospf6.c:ospf6_decode_v3(), described in CNVD-2017-28273 as a buffer overflow in OSPFv3. This remote vulnerability could enable a crash or potential information leakage. The public de...

CVE-2017-13052

CVE-2017-13052 affects tcpdump’s CFM parser. The buffer over-read occurs in print-cfm.c:cfm_print() prior to tcpdump 4.9.2. A fix is available in version 4.9.2 (update to 4.9.2 or later). In the accompanying advisories, tcpdump vulnerabilities were addressed by upgrading to 4.9.2, indicating reme...

CVE-2017-13014

The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wbprep, several functions...

CVE-2017-13017

The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6optprint...

CVE-2017-13025

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-12902

The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions...

CVE-2017-12988

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...

CVE-2017-13034

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...

CVE-2017-13020

The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtpprint...

CVE-2017-12990

CVE-2017-12990 affects tcpdump’s ISAKMP parser (print-isakmp.c) and could cause an infinite loop, leading to a denial of service. The issue was fixed in tcpdump 4.9.2; users should upgrade to 4.9.2 or newer. Connected sources also document related tcpdump vulnerabilities in the same release famil...

CVE-2017-12990

The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions...

CVE-2017-13688

CVE-2017-13688 affects tcpdump’s OLSR parser. The vulnerability is a buffer over-read in print-olsr.c:olsr_print() in tcpdump versions prior to 4.9.2. Public advisories (IBM AIX tcpdump advisory and Debian DSA) confirm the OLSR-related issue and note fixes in tcpdump 4.9.2. Remediation: upgrade t...

CVE-2017-13030

CVE-2017-13030 refers to tcpdump before 4.9.2, which contains a buffer over-read in the PIM parser (print-pim.c). The affected component is the PIM multicast parser in tcpdump; the issue arises from reading past the end of a buffer, potentially enabling information disclosure or a crash. The CVSS...

CVE-2017-13019

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...

CVE-2017-13021

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6print...

CVE-2017-13034

CVE-2017-13034 : The tcpdump PGM parser has a vulnerability in print-pgm.c:pgm_print() that allows a buffer over-read in tcpdump versions before 4.9.2. This is a memory-read issue in the PGM component, potentially enabling information disclosure or application instability. The vulnerability is do...

CVE-2017-12995

CVE-2017-12995 affects tcpdump’s DNS parser. A bug in print-domain.c:ns_print() could cause an infinite loop when parsing certain DNS data. The issue is fixed in tcpdump version 4.9.2; remediation is to upgrade to 4.9.2 or later. Other related advisories in connected documents confirm tcpdump vul...

CVE-2017-13010

CVE-2017-13010 affects tcpdump and its BEEP parser: a buffer overread in print-beep.c:l_strnstart() could enable reading memory beyond bounds. Public listings (NVD, CVE databases, Debian advisories) confirm a tcpdump 4.9.2 fix exists; upgrade to 4.9.2 or later to mitigate. Connected sources also ...

CVE-2017-13005

CVE-2017-13005 concerns tcpdump’s NFS parser. A buffer over-read in print-nfs.c:xid_map_enter() affects tcpdump prior to 4.9.2, enabling potential information disclosure. The entry is supported by multiple advisories (e.g., Debian DSA-3971-1 and USN-3415-1) confirming a tcpdump vulnerability with...