CVE-2017-12900

CVE-2017-12900 affects tcpdump; a buffer over-read in util-print.c:tok2strbuf() in several protocol parsers could allow information disclosure. Public advisories (Debian DSA-3971-1, DebianSEC/USN-3415-1, Ubuntu/Debian releases) confirm the issue and state fixes are available with tcpdump version ...

CVE-2017-12894

Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookupbytestring...

CVE-2017-12896

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmprfc3948print...

CVE-2017-12902

The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions...

CVE-2017-13688

CVE-2017-13688 affects tcpdump’s OLSR parser. The vulnerability is a buffer over-read in print-olsr.c:olsr_print() in tcpdump versions prior to 4.9.2. Public advisories (IBM AIX tcpdump advisory and Debian DSA) confirm the OLSR-related issue and note fixes in tcpdump 4.9.2. Remediation: upgrade t...

CVE-2017-13051

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...

CVE-2017-13050

CVE-2017-13050 affects tcpdump up to version 4.9.2, due to a buffer over-read in the RPKI-Router parser (rpki_rtr_pdu_print in print-rpki-rtr.c). An attacker can trigger this remotely to obtain sensitive information from memory. The linked advisories list tcpdump fixes in 4.9.2 and note the RPKI-...

CVE-2017-13053

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodertroutinginfo...

CVE-2017-13053

CVE-2017-13053 affects tcpdump prior to 4.9.2, due to a buffer over-read in the BGP parser (print-bgp.c:decode_rt_routing_info). The issue is in tcpdump’s BGP decoding path and upgraded builds (tcpdump 4.9.2 or later) are issued as the fix per linked advisories; exploitation details are not expli...

CVE-2017-13052

CVE-2017-13052 affects tcpdump’s CFM parser. The buffer over-read occurs in print-cfm.c:cfm_print() prior to tcpdump 4.9.2. A fix is available in version 4.9.2 (update to 4.9.2 or later). In the accompanying advisories, tcpdump vulnerabilities were addressed by upgrading to 4.9.2, indicating reme...

CVE-2017-13052

The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfmprint...

CVE-2017-13055

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintisreachsubtlv...

CVE-2017-13028

The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootpprint...

CVE-2017-13020

The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtpprint...

CVE-2017-13020

The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtpprint...

CVE-2017-12893

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...

CVE-2017-13045

CVE-2017-13045 affects tcpdump prior to 4.9.2 via a buffer over-read in the VQP parser (print-vqp.c:vqp_print). This can potentially disclose information from memory due to a over-read in the VQP path. The CVSS vectors indicate a high-severity, network-exposed issue with substantial impact across...

CVE-2017-13037

CVE-2017-13037 concerns tcpdump prior to 4.9.2, where the IP parser in print-ip.c:ip_printts() has a buffer overread. It could allow a remote attacker to obtain sensitive information. Public advisories confirm fixes in tcpdump 4.9.2 and later; Debian also lists this as addressed in DSA-3971-1. Im...

CVE-2017-12990

CVE-2017-12990 affects tcpdump’s ISAKMP parser (print-isakmp.c) and could cause an infinite loop, leading to a denial of service. The issue was fixed in tcpdump 4.9.2; users should upgrade to 4.9.2 or newer. Connected sources also document related tcpdump vulnerabilities in the same release famil...

CVE-2017-13004

CVE-2017-13004 affects tcpdump prior to 4.9.2, where the Juniper protocols parser (print-juniper.c, juniper_parse_header) can trigger a buffer over-read. This could lead to information disclosure or crash under crafted input. Affected software: tcpdump. Mitigation: upgrade to tcpdump 4.9.2 or app...