3979 matches found
CVE-2017-13050
CVE-2017-13050 affects tcpdump up to version 4.9.2, due to a buffer over-read in the RPKI-Router parser (rpki_rtr_pdu_print in print-rpki-rtr.c). An attacker can trigger this remotely to obtain sensitive information from memory. The linked advisories list tcpdump fixes in 4.9.2 and note the RPKI-...
CVE-2017-13004
CVE-2017-13004 affects tcpdump prior to 4.9.2, where the Juniper protocols parser (print-juniper.c, juniper_parse_header) can trigger a buffer over-read. This could lead to information disclosure or crash under crafted input. Affected software: tcpdump. Mitigation: upgrade to tcpdump 4.9.2 or app...
CVE-2017-12898
CVE-2017-12898 affects tcpdump before 4.9.2, where the NFS parser’s interp_reply() can perform a buffer over-read. This is a remote, network-exploitable condition tied to the NFS parser; the CVSS 3.x score is 9.8 (CRITICAL) with HIGH impact on confidentiality, integrity, and availability. Affecte...
CVE-2017-12990
The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions...
CVE-2017-13047
CVE-2017-13047: tcpdump before 4.9.2 has a buffer over-read in the ISO ES-IS parser (print-isoclns.c: esis_print). The issue can lead to memory disclosure when processing certain packets. Affected product: tcpdump; vulnerable component: ISO ES-IS parser; root cause: out-of-bounds read in esis_pri...
CVE-2017-13015
tcpdump vulnerability CVE-2017-13015 exists in the EAP parser (eap_print) where a buffer over-read can occur in print-eap.c. It affects tcpdump builds prior to 4.9.2 and could lead to information disclosure or crash when processing crafted traffic. The approved remediation is to upgrade to tcpdum...
CVE-2017-13017
The CVE-2017-13017 entry affects tcpdump’s DHCPv6 parser: a buffer over-read in print-dhcp6.c:dhcp6opt_print() prior to version 4.9.2. This could allow a remote attacker to access sensitive information (as per CVSS/NC notes; high severity). The documented remediation is to upgrade to tcpdump 4.9....
CVE-2017-12999
tcpdump contains a buffer over-read in the IS-IS parser (print-isoclns.c:isis_print) affecting the tcpdump project; CVE-2017-12999 is documented in multiple advisories. Publicly disclosed details show the issue exists in tcpdump prior to version 4.9.2 and has been addressed by upgrading to tcpdum...
CVE-2017-13000
The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802154.c:ieee802154ifprint...
CVE-2017-13000
CVE-2017-13000 affects tcpdump, specifically the IEEE 802.15.4 parser. The vulnerability is a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print(), which could allow a remote attacker to obtain sensitive information. The issue is fixed in tcpdump version 4.9.2 (as noted in the IBM AIX adv...
CVE-2017-12901
The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrpprint...
CVE-2017-12986
The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6print...
CVE-2017-12996
The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2print...
CVE-2017-13011
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2strinternal...
CVE-2017-13016
The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...
CVE-2017-13023
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...
CVE-2017-13027
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpmgmtaddrtlvprint...
CVE-2017-13028
The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootpprint...