CVE-2017-12985

The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6print...

CVE-2017-12987

The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-80211.c:parseelements...

CVE-2017-12988

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...

CVE-2017-12995

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...

CVE-2017-13020

The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtpprint...

CVE-2017-13023

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-13027

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpmgmtaddrtlvprint...

CVE-2017-13030

The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions...

CVE-2017-13052

The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfmprint...

CVE-2017-13054

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpprivate8023print...

CVE-2017-13688

The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsrprint...

CVE-2017-13016

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...

CVE-2017-13028

CVE-2017-13028 (tcpdump) affects tcpdump prior to 4.9.2, describing a buffer over-read in the BOOTP parser (print-bootp.c:bootp_print()). The connected Debian/DSA advisories and upstream tcpdump notes confirm the issue and list 4.9.2 as the fix. Remediation: upgrade tcpdump to version 4.9.2 or la...

CVE-2017-12902

CVE-2017-12902 affects tcpdump (Zephyr parser) up to version 4.9.2. The vulnerability is a buffer over-read in print-zephyr.c that could lead to information exposure or a crash. Affected product: tcpdump (Zephyr parser) before 4.9.2. Root cause: buffer over-read in Zephyr parser. Impact (as per s...

CVE-2017-13024

The CVE-2017-13024 issue affects tcpdump before 4.9.2, where the IPv6 mobility parser’s mobility_opt_print() performs a buffer over-read. The vulnerability exists in versions prior to 4.9.2 and can lead to information disclosure or crash. Mitigation: upgrade tcpdump to version 4.9.2 or later (pat...

CVE-2017-13725

CVE-2017-13725 affects tcpdump, with a buffer over-read in IPv6 routing header parser (print-rt6.c:rt6_print) mitigated by upgrading to tcpdump 4.9.2. The vulnerability could enable information disclosure or trigger a crash due to memory handling weaknesses in the IPv6 routing header path. Remedi...

CVE-2017-12899

The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnetprint...

CVE-2017-12899

The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnetprint...

CVE-2017-12896

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmprfc3948print...

CVE-2017-13022

tcpdump has a buffer over-read in print-ip.c:ip_printroute() (CVE-2017-13022). Debian's DSA-3971-1 and related advisories indicate the fix is in tcpdump 4.9.2 (and backported for various releases). Systems using tcpdump prior to 4.9.2 should upgrade to 4.9.2 or later to mitigate. The Debian advis...