CVE-2017-13000

The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802154.c:ieee802154ifprint...

CVE-2017-13049

CVE-2017-13049 affects tcpdump before 4.9.2, due to a buffer over-read in the Rx protocol parser (print-rx.c:ubik_print). The issue could lead to information disclosure (buffer over-read). Remediation: upgrade tcpdump to version 4.9.2 or apply the vendor advisory fix. The CVSS values in the recor...

CVE-2017-13051

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...

CVE-2017-13042

The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6print...

CVE-2017-13053

CVE-2017-13053 affects tcpdump prior to 4.9.2, due to a buffer over-read in the BGP parser (print-bgp.c:decode_rt_routing_info). The issue is in tcpdump’s BGP decoding path and upgraded builds (tcpdump 4.9.2 or later) are issued as the fix per linked advisories; exploitation details are not expli...

CVE-2017-13002

The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodvextension...

CVE-2017-13027

The CVE-2017-13027 entry concerns tcpdump’s LLDP parser. A buffer over-read in print-lldp.c:lddp_mgmt_addr_tlv_print() affects tcpdump prior to version 4.9.2, potentially enabling information disclosure or faulting the application when processing LLDP data. The vulnerability is confirmed in offic...

CVE-2017-12991

tcpdump (before 4.9.2) is affected by CVE-2017-12991 due to a buffer over-read in the BGP parser (print-bgp.c:bgp_attr_print). The issue affects tcpdump’s BGP attribute handling and could lead to exposure of sensitive information. The CVSS vectors in the NVD entry indicate a HIGH (CVSS2 7.5) / CR...

CVE-2017-12987

The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-80211.c:parseelements...

CVE-2017-13025

CVE-2017-13025 affects tcpdump: the IPv6 mobility parser contains a buffer over-read in mobility_opt_print() prior to version 4.9.2. The vulnerability could allow memory disclosure due to over-read; affected products are tcpdump builds before 4.9.2. Mitigation as documented in multiple advisories...

CVE-2017-12990

The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions...

CVE-2017-13051

CVE-2017-13051 refers to a buffer over-read in tcpdump’s RSVP parser (print-rsvp.c:rsvp_obj_print()) present before version 4.9.2. The connected documents confirm this is a tcpdump parser vulnerability affecting RSVP parsing, with the issue described as a memory over-read/over-read risk in the RS...

CVE-2017-13041

CVE-2017-13041 concerns tcpdump’s ICMPv6 parser, where the icmp6_nodeinfo_print() function may read beyond a memory buffer in versions before 4.9.2. Affected software: tcpdump (network packet analyzer). Documented impact: buffer over-read that could lead to information disclosure or crash. CVSS d...

CVE-2017-12900

Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf...

CVE-2017-12998

tcpdump before 4.9.2 has a buffer over-read in the IS-IS parser (print-isoclns.c:isis_print_extd_ip_reach) that could allow a remote attacker to obtain sensitive information; upgrade to tcpdump 4.9.2 or later to fix.

CVE-2017-13010

The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:lstrnstart...

CVE-2017-13044

The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4print...

CVE-2017-13690

The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions...

CVE-2017-13690

CVE-2017-13690 affects tcpdump up to version 4.9.1 (before 4.9.2). The vulnerability is a buffer over-read in the IKEv2 parser, specifically in the print-isakmp.c functions, which could allow a network attacker to obtain sensitive information. The CVSS3 score is reported as 9.8 (CRITICAL); attack...

CVE-2017-13037

CVE-2017-13037 concerns tcpdump prior to 4.9.2, where the IP parser in print-ip.c:ip_printts() has a buffer overread. It could allow a remote attacker to obtain sensitive information. Public advisories confirm fixes in tcpdump 4.9.2 and later; Debian also lists this as addressed in DSA-3971-1. Im...