3979 matches found
CVE-2017-12996
CVE-2017-12996 concerns tcpdump’s PIMv2 parser, where a buffer over-read in pimv2_print() could allow an attacker to obtain sensitive information. The vulnerability is in tcpdump before 4.9.2 and is classified as high severity (CVSS v3 base 9.8; network vector, no auth required). The documented r...
CVE-2017-12989
The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:respgetlength...
CVE-2017-12992
The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripngprint...
CVE-2017-12991
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...
CVE-2017-12991
tcpdump (before 4.9.2) is affected by CVE-2017-12991 due to a buffer over-read in the BGP parser (print-bgp.c:bgp_attr_print). The issue affects tcpdump’s BGP attribute handling and could lead to exposure of sensitive information. The CVSS vectors in the NVD entry indicate a HIGH (CVSS2 7.5) / CR...
CVE-2017-12997
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...
CVE-2017-12898
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interpreply...
CVE-2017-12895
The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...
CVE-2017-12901
The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrpprint...
CVE-2017-12901
This CVE concerns tcpdump's EIGRP parser. A buffer over-read in print-eigrp.c:eigrp_print() affects tcpdump before version 4.9.2, enabling a remote attacker to potentially access sensitive information. The issue is mitigated by upgrading to tcpdump 4.9.2 or later, which contains the fix. If upgra...
CVE-2017-12900
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf...
CVE-2017-13025
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...
CVE-2017-13023
tcpdump before 4.9.2 is affected by a buffer over-read in the IPv6 mobility parser (print-mobility.c: mobility_opt_print). CVE-2017-13023 is documented with high-severity impact and information disclosure potential; remediation is to upgrade tcpdump to 4.9.2 or later. Public advisories summarize ...
CVE-2017-13041
The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6nodeinfoprint...
CVE-2017-12897
CVE-2017-12897 affects tcpdump. The ISO CLNS parser has a buffer over-read in print-isoclns.c:isoclns_print, exploitable via network access. CVSSv3 base score 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Consequences include potential data disclosure or crash, as detailed in public adviso...
CVE-2017-13725
CVE-2017-13725 affects tcpdump, with a buffer over-read in IPv6 routing header parser (print-rt6.c:rt6_print) mitigated by upgrading to tcpdump 4.9.2. The vulnerability could enable information disclosure or trigger a crash due to memory handling weaknesses in the IPv6 routing header path. Remedi...
CVE-2017-13028
The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootpprint...
CVE-2017-13024
The CVE-2017-13024 issue affects tcpdump before 4.9.2, where the IPv6 mobility parser’s mobility_opt_print() performs a buffer over-read. The vulnerability exists in versions prior to 4.9.2 and can lead to information disclosure or crash. Mitigation: upgrade tcpdump to version 4.9.2 or later (pat...