3979 matches found
CVE-2017-12999
tcpdump contains a buffer over-read in the IS-IS parser (print-isoclns.c:isis_print) affecting the tcpdump project; CVE-2017-12999 is documented in multiple advisories. Publicly disclosed details show the issue exists in tcpdump prior to version 4.9.2 and has been addressed by upgrading to tcpdum...
CVE-2017-12995
The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...
CVE-2017-12995
CVE-2017-12995 affects tcpdump’s DNS parser. A bug in print-domain.c:ns_print() could cause an infinite loop when parsing certain DNS data. The issue is fixed in tcpdump version 4.9.2; remediation is to upgrade to 4.9.2 or later. Other related advisories in connected documents confirm tcpdump vul...
CVE-2017-13006
The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions...
CVE-2017-13010
CVE-2017-13010 affects tcpdump and its BEEP parser: a buffer overread in print-beep.c:l_strnstart() could enable reading memory beyond bounds. Public listings (NVD, CVE databases, Debian advisories) confirm a tcpdump 4.9.2 fix exists; upgrade to 4.9.2 or later to mitigate. Connected sources also ...
CVE-2017-13005
CVE-2017-13005 concerns tcpdump’s NFS parser. A buffer over-read in print-nfs.c:xid_map_enter() affects tcpdump prior to 4.9.2, enabling potential information disclosure. The entry is supported by multiple advisories (e.g., Debian DSA-3971-1 and USN-3415-1) confirming a tcpdump vulnerability with...
CVE-2017-13015
tcpdump vulnerability CVE-2017-13015 exists in the EAP parser (eap_print) where a buffer over-read can occur in print-eap.c. It affects tcpdump builds prior to 4.9.2 and could lead to information disclosure or crash when processing crafted traffic. The approved remediation is to upgrade to tcpdum...
CVE-2017-13018
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...
CVE-2017-13017
The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6optprint...
CVE-2017-13017
The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6optprint...
CVE-2017-13017
The CVE-2017-13017 entry affects tcpdump’s DHCPv6 parser: a buffer over-read in print-dhcp6.c:dhcp6opt_print() prior to version 4.9.2. This could allow a remote attacker to access sensitive information (as per CVSS/NC notes; high severity). The documented remediation is to upgrade to tcpdump 4.9....
CVE-2017-13013
The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions...
CVE-2017-13013
CVE-2017-13013 is a tcpdump vulnerability described in IBM AIX advisory: the ARP parser contains a buffer over-read in print-arp.c, affecting tcpdump versions prior to 4.9.2. The vulnerability can allow a remote attacker to obtain sensitive information due to memory overread in the ARP path. The ...
CVE-2017-12893
The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...
CVE-2017-12894
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookupbytestring...
CVE-2017-13045
CVE-2017-13045 affects tcpdump prior to 4.9.2 via a buffer over-read in the VQP parser (print-vqp.c:vqp_print). This can potentially disclose information from memory due to a over-read in the VQP path. The CVSS vectors indicate a high-severity, network-exposed issue with substantial impact across...
CVE-2017-13042
The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6print...
CVE-2017-13053
CVE-2017-13053 affects tcpdump prior to 4.9.2, due to a buffer over-read in the BGP parser (print-bgp.c:decode_rt_routing_info). The issue is in tcpdump’s BGP decoding path and upgraded builds (tcpdump 4.9.2 or later) are issued as the fix per linked advisories; exploitation details are not expli...