3979 matches found
CVE-2017-13689
CVE-2017-13689 concerns tcpdump’s IKEv1 parser. The vulnerability is a buffer over-read in print-isakmp.c:ikev1_id_print() affecting tcpdump versions before 4.9.2. This could enable a remote attacker to obtain sensitive information from memory. Public details in connected sources confirm the vuln...
CVE-2017-13031
CVE-2017-13031 relates to tcpdump’s IPv6 fragmentation header parser, where a buffer over-read occurs in print-frag6.c:frag6_print() prior to version 4.9.2. The Initial Document confirms the flaw and notes the fix/update to 4.9.2. Connected documentation references multiple advisories and CVSS da...
CVE-2017-13039
The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions...
CVE-2017-12993
The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions...
CVE-2017-13002
The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodvextension...
CVE-2017-13035
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintid...
CVE-2017-13026
CVE-2017-13026 affects the tcpdump ISO IS-IS parser. The vulnerability is a buffer over-read in print-isoclns.c, present in tcpdump versions prior to 4.9.2. Upgrading to tcpdump 4.9.2 (or later) is the remediation. Public sources (Debian/CNVD/etc.) confirm the issue and the fix timeline; exploita...
CVE-2017-13011
tcpdump CVE-2017-13011 is a vulnerability in bittok2str_internal() that can cause a buffer overflow in multiple protocol parsers. The issue affects tcpdump releases prior to 4.9.2, and has been addressed by upgrading to tcpdump 4.9.2 (as reflected in Debian DSA-3971-1/DSA-3971-1, IBM AIX advisori...
CVE-2017-13011
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2strinternal...
CVE-2017-13045
The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqpprint...
CVE-2017-13038
The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handlemlppp...
CVE-2017-12987
tcpdump before 4.9.2 contains a buffer over-read in print-802_11.c:parse_elements(), affecting the IEEE 802.11 parser and enabling possible information disclosure. The CVE is CVE-2017-12987. Public sources describe the issue as a memory overread that could leak sensitive data from the affected pa...
CVE-2017-12987
The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-80211.c:parseelements...
CVE-2017-12899
CVE-2017-12899 affects tcpdump DECnet parser; a buffer over-read in print-decnet.c decnet_print() could be triggered in versions before 4.9.2. Remediation: upgrade tcpdump to 4.9.2 or newer. Other references in Debian/IBM advisories corroborate tcpdump vulnerabilities fixed in this release.
CVE-2017-13009
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...
CVE-2017-12895
The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...
CVE-2017-12899
The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnetprint...
CVE-2017-12998
The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintextdipreach...