3977 matches found
CVE-2017-13016
The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...
CVE-2017-13024
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...
CVE-2017-13028
The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootpprint...
CVE-2017-13052
The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfmprint...
CVE-2017-12987
The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-80211.c:parseelements...
CVE-2017-12988
The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...
CVE-2017-13026
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions...
CVE-2017-13027
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpmgmtaddrtlvprint...
CVE-2017-13047
The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...
CVE-2017-13019
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...
CVE-2017-12898
CVE-2017-12898 affects tcpdump before 4.9.2, where the NFS parser’s interp_reply() can perform a buffer over-read. This is a remote, network-exploitable condition tied to the NFS parser; the CVSS 3.x score is 9.8 (CRITICAL) with HIGH impact on confidentiality, integrity, and availability. Affecte...
CVE-2017-13004
CVE-2017-13004 affects tcpdump prior to 4.9.2, where the Juniper protocols parser (print-juniper.c, juniper_parse_header) can trigger a buffer over-read. This could lead to information disclosure or crash under crafted input. Affected software: tcpdump. Mitigation: upgrade to tcpdump 4.9.2 or app...
CVE-2017-12988
The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...
CVE-2017-12985
CVE-2017-12985 affects tcpdump’s IPv6 parser. The description in the CVE notes a buffer over-read in ip6_print() within print-ip6.c, and connected advisories confirm tcpdump before 4.9.2 is vulnerable. Impact is described as potential exposure via memory overread, with CVSS v3.0/3.1 vectors indic...
CVE-2017-13687
The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlcprint...
CVE-2017-13016
The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...
CVE-2017-12990
CVE-2017-12990 affects tcpdump’s ISAKMP parser (print-isakmp.c) and could cause an infinite loop, leading to a denial of service. The issue was fixed in tcpdump 4.9.2; users should upgrade to 4.9.2 or newer. Connected sources also document related tcpdump vulnerabilities in the same release famil...
CVE-2017-12900
CVE-2017-12900 affects tcpdump; a buffer over-read in util-print.c:tok2strbuf() in several protocol parsers could allow information disclosure. Public advisories (Debian DSA-3971-1, DebianSEC/USN-3415-1, Ubuntu/Debian releases) confirm the issue and state fixes are available with tcpdump version ...