3979 matches found
CVE-2017-13005
CVE-2017-13005 concerns tcpdump’s NFS parser. A buffer over-read in print-nfs.c:xid_map_enter() affects tcpdump prior to 4.9.2, enabling potential information disclosure. The entry is supported by multiple advisories (e.g., Debian DSA-3971-1 and USN-3415-1) confirming a tcpdump vulnerability with...
CVE-2017-13017
The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6optprint...
CVE-2017-13013
CVE-2017-13013 is a tcpdump vulnerability described in IBM AIX advisory: the ARP parser contains a buffer over-read in print-arp.c, affecting tcpdump versions prior to 4.9.2. The vulnerability can allow a remote attacker to obtain sensitive information due to memory overread in the ARP path. The ...
CVE-2017-13053
CVE-2017-13053 affects tcpdump prior to 4.9.2, due to a buffer over-read in the BGP parser (print-bgp.c:decode_rt_routing_info). The issue is in tcpdump’s BGP decoding path and upgraded builds (tcpdump 4.9.2 or later) are issued as the fix per linked advisories; exploitation details are not expli...
CVE-2017-13054
CVE-2017-13054 affects tcpdump and is a buffer over-read in the LLDP parser (print-lldp.c: lldp_private_8023_print()). The IBM AIX bulletin and Debian security notes confirm the vulnerability could allow a remote attacker to obtain sensitive information and cause information exposure via the LLDP...
CVE-2017-13048
The CVE-2017-13048 entry affects tcpdump prior to 4.9.2, caused by a buffer over-read in print-rsvp.c:rsvp_obj_print() within the RSVP parser. Public advisories (Debian, Debian security tracker, and IBM AIX bulletin) confirm the issue and reference the same code path. Affected versions include tc...
CVE-2017-13049
CVE-2017-13049 affects tcpdump before 4.9.2, due to a buffer over-read in the Rx protocol parser (print-rx.c:ubik_print). The issue could lead to information disclosure (buffer over-read). Remediation: upgrade tcpdump to version 4.9.2 or apply the vendor advisory fix. The CVSS values in the recor...
CVE-2017-13047
The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...
CVE-2017-13037
The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintts...
CVE-2017-13014
CVE-2017-13014 relates to tcpdump prior to 4.9.2, where the White Board protocol parser (print-wb.c: wb_prep and related paths) has a buffer over-read/over-read condition. This could allow an attacker to access sensitive memory or information when processing crafted traffic. The affected product ...
CVE-2017-12993
The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions...
CVE-2017-13016
The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...
CVE-2017-13035
CVE-2017-13035 affects tcpdump’s ISO IS-IS parser. The issue is a buffer over-read in print-isoclns.c:isis_print_id() for tcpdump versions before 4.9.2, potentially allowing disclosure of sensitive information. Remediation: upgrade tcpdump to 4.9.2 or later. If upgrading is not possible, consult ...
CVE-2017-13008
The CVE-2017-13008 entry is valid and supported by connected documents. It affects tcpdump prior to 4.9.2, where the IEEE 802.11 parser (print-802_11.c:parse_elements) has a buffer over-read vulnerability. An attacker could potentially exploit this via crafted traffic to obtain sensitive informat...
CVE-2017-12986
CVE-2017-12986 affects tcpdump prior to 4.9.2, caused by a buffer over-read in the IPv6 routing header parser (print-rt6.c: rt6_print). This could allow a remote attacker to obtain sensitive information from crafted packets. The Debian/IBM advisories confirm the issue and list tcpdump 4.9.2 as th...
CVE-2017-12995
The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...
CVE-2017-13037
CVE-2017-13037 concerns tcpdump prior to 4.9.2, where the IP parser in print-ip.c:ip_printts() has a buffer overread. It could allow a remote attacker to obtain sensitive information. Public advisories confirm fixes in tcpdump 4.9.2 and later; Debian also lists this as addressed in DSA-3971-1. Im...
CVE-2017-13027
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpmgmtaddrtlvprint...
