3979 matches found
CVE-2017-12895
The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...
CVE-2017-12897
The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclnsprint...
CVE-2017-12999
The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprint...
CVE-2017-12994
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...
CVE-2017-12994
CVE-2017-12994 affects tcpdump prior to 4.9.2, with a buffer over-read in print-bgp.c:bgp_attr_print() within the BGP parser. The issue can allow an attacker to read memory and potentially disclose sensitive information. The available connected documents confirm the root cause and describe the fi...
CVE-2017-12989
The CVE-2017-12989 issue affects tcpdump before 4.9.2, where the RESP parser (print-resp.c:resp_get_length()) could enter an infinite loop, enabling a denial of service. Public sources show CVSSv3 base 7.5 (HIGH) with network access, low attack complexity, no authentication, and availability impa...
CVE-2017-12985
The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6print...
CVE-2017-12998
The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintextdipreach...
CVE-2017-12997
The CVE-2017-12997 entry concerns tcpdump’s LLDP parser. A bug in print-lldp.c:lldp_private_8021_print() could cause an infinite loop, enabling a denial-of-service condition. Affected product: tcpdump (versions before 4.9.2). Observed impact per the document: denial of service via infinite loop t...
CVE-2017-13001
CVE-2017-13001 affects tcpdump prior to 4.9.2 where the NFS parser in nfs_printfh() has a buffer over-read. Public sources (NVD entry for tcpdump 4.9.2 fix; Debian DSA-3971-1 and Debian LTS advisory; IBM AIX/tcpdump advisory) confirm the issue is in the NFS parser and fixed by updating to tcpdump...
CVE-2017-12985
The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6print...
CVE-2017-12997
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...
CVE-2017-12998
tcpdump before 4.9.2 has a buffer over-read in the IS-IS parser (print-isoclns.c:isis_print_extd_ip_reach) that could allow a remote attacker to obtain sensitive information; upgrade to tcpdump 4.9.2 or later to fix.
CVE-2017-13725
The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6print...
CVE-2017-13014
The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wbprep, several functions...
CVE-2017-12895
CVE-2017-12895 affects tcpdump prior to 4.9.2, describing a buffer over-read in the ICMP parser (print-icmp.c: icmp_print). This could allow a remote attacker to obtain sensitive information through crafted traffic. Mitigation: upgrade tcpdump to version 4.9.2 or newer; no other details (vectors,...
CVE-2017-13034
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...
CVE-2017-13032
The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:printattrstring...
CVE-2017-13032
CVE-2017-13032 affects tcpdump prior to 4.9.2, reporting a buffer over-read in print-radius.c:print_attr_string() of the RADIUS parser. The initial document confirms the issue as a memory read vulnerability that could leak information, with CVSSv3/base score components indicating high severity (C...