CVE-2017-13040

The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions...

CVE-2017-13044

CVE-2017-13044 describes a buffer over-read in the HNCP parser of tcpdump. Public sources in the connected documents confirm the issue resides in the print-hncp.c:dhcpv4_print() path and affect tcpdump prior to version 4.9.2. The available remediation in the connected Debian advisory and related ...

CVE-2017-13690

The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions...

CVE-2017-13689

The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1idprint...

CVE-2017-13689

The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1idprint...

CVE-2017-13690

CVE-2017-13690 affects tcpdump up to version 4.9.1 (before 4.9.2). The vulnerability is a buffer over-read in the IKEv2 parser, specifically in the print-isakmp.c functions, which could allow a network attacker to obtain sensitive information. The CVSS3 score is reported as 9.8 (CRITICAL); attack...

CVE-2017-13001

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfsprintfh...

CVE-2017-13002

tcpdump 4.x before 4.9.2 contains a buffer over-read in the AODV parser (print-aodv.c:aodv_extension). This is CVE-2017-13002. The issue stems from reading memory beyond bounds in the AODV extension handling, which could crash the application or cause memory disclosure. Fix: upgrade tcpdump to 4....

CVE-2017-13000

The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802154.c:ieee802154ifprint...

CVE-2017-13001

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfsprintfh...

CVE-2017-13015

The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eapprint...

CVE-2017-13016

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...

CVE-2017-13009

CVE-2017-13009 : tcpdump before 4.9.2 contains a buffer over-read in print-mobility.c:mobility_print() within the IPv6 mobility parser. This could allow a remote attacker to access sensitive information via a crafted IPv6 mobility input. The issue is part of a family of tcpdump vulnerabilities an...

CVE-2017-13012

The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...

CVE-2017-13012

CVE-2017-13012 affects tcpdump’s ICMP parser (print-icmp.c:icmp_print) with a buffer over-read in versions prior to 4.9.2. Multiple sources (NVD entry, Debian/DSA-3971-1, Ubuntu/USN-3415-1, IBM AIX advisory) confirm the flaw and that upgrading to tcpdump 4.9.2 (or applying the vendor patch) mitig...

CVE-2017-13025

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-13027

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpmgmtaddrtlvprint...

CVE-2017-13019

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...

CVE-2017-13021

tcpdump's ICMPv6 parser (icmp6_print) contains a buffer over-read in versions prior to 4.9.2, which could allow a remote attacker to obtain sensitive information or crash the application. Upgrade to tcpdump 4.9.2 or later to remediate.

CVE-2017-13023

tcpdump before 4.9.2 is affected by a buffer over-read in the IPv6 mobility parser (print-mobility.c: mobility_opt_print). CVE-2017-13023 is documented with high-severity impact and information disclosure potential; remediation is to upgrade tcpdump to 4.9.2 or later. Public advisories summarize ...