CVE-2017-12902

CVE-2017-12902 affects tcpdump (Zephyr parser) up to version 4.9.2. The vulnerability is a buffer over-read in print-zephyr.c that could lead to information exposure or a crash. Affected product: tcpdump (Zephyr parser) before 4.9.2. Root cause: buffer over-read in Zephyr parser. Impact (as per s...

CVE-2017-12992

The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripngprint...

CVE-2017-13012

CVE-2017-13012 affects tcpdump’s ICMP parser (print-icmp.c:icmp_print) with a buffer over-read in versions prior to 4.9.2. Multiple sources (NVD entry, Debian/DSA-3971-1, Ubuntu/USN-3415-1, IBM AIX advisory) confirm the flaw and that upgrading to tcpdump 4.9.2 (or applying the vendor patch) mitig...

CVE-2017-12988

CVE-2017-12988 affects tcpdump prior to 4.9.2, due to a buffer over-read in telnet_parse() within print-telnet.c. This could allow a remote attacker to obtain sensitive information. The issue is fixed by upgrading to tcpdump 4.9.2 (as referenced in tcpdump advisory updates). If maintaining vulner...

CVE-2017-12896

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmprfc3948print...

CVE-2017-13022

tcpdump has a buffer over-read in print-ip.c:ip_printroute() (CVE-2017-13022). Debian's DSA-3971-1 and related advisories indicate the fix is in tcpdump 4.9.2 (and backported for various releases). Systems using tcpdump prior to 4.9.2 should upgrade to 4.9.2 or later to mitigate. The Debian advis...

CVE-2017-13028

CVE-2017-13028 (tcpdump) affects tcpdump prior to 4.9.2, describing a buffer over-read in the BOOTP parser (print-bootp.c:bootp_print()). The connected Debian/DSA advisories and upstream tcpdump notes confirm the issue and list 4.9.2 as the fix. Remediation: upgrade tcpdump to version 4.9.2 or la...

CVE-2017-12902

The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions...

CVE-2017-13042

tcpdump before 4.9.2 has a buffer over-read in the HNCP parser (print-hncp.c:dhcpv6_print) that could allow a remote attacker to obtain sensitive information; fixed by updating to tcpdump 4.9.2.

CVE-2017-13040

The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions...

CVE-2017-13054

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpprivate8023print...

CVE-2017-13053

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodertroutinginfo...

CVE-2017-13045

The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqpprint...

CVE-2017-13046

tcpdump vulnerability CVE-2017-13046 is a buffer over-read in the BGP parser (bgp_attr_print in print-bgp.c) affecting tcpdump before version 4.9.2. This can allow a remote attacker to obtain sensitive information and may contribute to a memory-disclosure scenario. Public advisories (e.g., Debian...

CVE-2017-13690

The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions...

CVE-2017-13689

The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1idprint...

CVE-2017-13689

The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1idprint...

CVE-2017-13049

The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubikprint...

CVE-2017-13007

CVE-2017-13007 affects tcpdump prior to 4.9.2. The Apple PKTAP parser can over-read a buffer in print-pktap.c:pktap_if_print(), potentially enabling a crash or partial data exposure. The issue is mitigated by upgrading tcpdump to version 4.9.2 or later (as reflected in multiple advisories). The p...

CVE-2017-13003

CVE-2017-13003 affects tcpdump prior to 4.9.2, where the LMP parser’s lmp_print() could read memory beyond bounds (buffer over-read). This vulnerability may enable an attacker to obtain sensitive information or crash the application when parsing LMP data. The issue is resolved by upgrading to tcp...