3979 matches found
CVE-2017-13024
The CVE-2017-13024 issue affects tcpdump before 4.9.2, where the IPv6 mobility parser’s mobility_opt_print() performs a buffer over-read. The vulnerability exists in versions prior to 4.9.2 and can lead to information disclosure or crash. Mitigation: upgrade tcpdump to version 4.9.2 or later (pat...
CVE-2017-13031
The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6print...
CVE-2017-12899
The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnetprint...
CVE-2017-13055
CVE-2017-13055 affects tcpdump prior to 4.9.2. Root cause: a buffer over-read in the ISO IS-IS parser (print-isoclns.c:isis_print_is_reach_subtlv). Impact: potential information disclosure and partial/total memory exposure as indicated by CVSS 3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base 9.8, CR...
CVE-2017-13018
TCPDUMP vulnerability CVE-2017-13018: the PGM parser in tcpdump before 4.9.2 contains a buffer over-read in print-pgm.c:pgm_print(), potentially enabling a remote attacker to obtain sensitive information. Public advisories confirm the issue affects tcpdump and provide a fixed version: upgrade to ...
CVE-2017-13009
CVE-2017-13009 : tcpdump before 4.9.2 contains a buffer over-read in print-mobility.c:mobility_print() within the IPv6 mobility parser. This could allow a remote attacker to access sensitive information via a crafted IPv6 mobility input. The issue is part of a family of tcpdump vulnerabilities an...
CVE-2017-13000
The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802154.c:ieee802154ifprint...
CVE-2017-13040
CVE-2017-13040 affects tcpdump prior to 4.9.2. The MPTCP parser contains a buffer over-read in print-mptcp.c, which could allow a remote attacker to access sensitive information. The advisory notes this as a tcpdump vulnerability and indicates remediation by upgrading to tcpdump 4.9.2 (or later)....
CVE-2017-13690
CVE-2017-13690 affects tcpdump up to version 4.9.1 (before 4.9.2). The vulnerability is a buffer over-read in the IKEv2 parser, specifically in the print-isakmp.c functions, which could allow a network attacker to obtain sensitive information. The CVSS3 score is reported as 9.8 (CRITICAL); attack...
CVE-2017-12988
CVE-2017-12988 affects tcpdump prior to 4.9.2, due to a buffer over-read in telnet_parse() within print-telnet.c. This could allow a remote attacker to obtain sensitive information. The issue is fixed by upgrading to tcpdump 4.9.2 (as referenced in tcpdump advisory updates). If maintaining vulner...
CVE-2017-13020
tcpdump vulnerability CVE-2017-13020 is a buffer over-read in the VTP parser (vtp_print) of the tcpdump code path. It affects versions prior to 4.9.2 and can potentially lead to memory disclosure or crash scenarios as indicated by CVSS scores in public advisories. The canonical remediation is upg...
CVE-2017-12896
CVE-2017-12896: tcpdump before 4.9.2 contains a buffer over-read in print-isakmp.c:isakmp_rfc3948_print() of the ISAKMP parser, potentially enabling sensitive data exposure. Affected product: tcpdump; vulnerable component: ISAKMP parser; root cause: buffer over-read in isakmp_rfc3948_print. Impac...
CVE-2017-13013
The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions...
CVE-2017-13040
The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions...
CVE-2017-13041
The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6nodeinfoprint...
CVE-2017-13041
CVE-2017-13041 concerns tcpdump’s ICMPv6 parser, where the icmp6_nodeinfo_print() function may read beyond a memory buffer in versions before 4.9.2. Affected software: tcpdump (network packet analyzer). Documented impact: buffer over-read that could lead to information disclosure or crash. CVSS d...
CVE-2017-13048
The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...
CVE-2017-13050
The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpkirtrpduprint...