CVE-2017-13044

The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4print...

CVE-2017-12897

The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclnsprint...

CVE-2017-12997

The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...

CVE-2017-13040

The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions...

CVE-2017-12998

The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintextdipreach...

CVE-2017-12987

tcpdump before 4.9.2 contains a buffer over-read in print-802_11.c:parse_elements(), affecting the IEEE 802.11 parser and enabling possible information disclosure. The CVE is CVE-2017-12987. Public sources describe the issue as a memory overread that could leak sensitive data from the affected pa...

CVE-2017-13041

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6nodeinfoprint...

CVE-2017-13011

tcpdump CVE-2017-13011 is a vulnerability in bittok2str_internal() that can cause a buffer overflow in multiple protocol parsers. The issue affects tcpdump releases prior to 4.9.2, and has been addressed by upgrading to tcpdump 4.9.2 (as reflected in Debian DSA-3971-1/DSA-3971-1, IBM AIX advisori...

CVE-2017-13046

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...

CVE-2017-13031

CVE-2017-13031 relates to tcpdump’s IPv6 fragmentation header parser, where a buffer over-read occurs in print-frag6.c:frag6_print() prior to version 4.9.2. The Initial Document confirms the flaw and notes the fix/update to 4.9.2. Connected documentation references multiple advisories and CVSS da...

CVE-2017-13034

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...

CVE-2017-13005

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xidmapenter...

CVE-2017-13006

CVE-2017-13006 affects tcpdump prior to 4.9.2, where the L2TP parser in print-l2tp.c has a buffer over-read/memory over-read issue in the L2TP component. This could allow a remote attacker to obtain sensitive information via crafted traffic over the network. The vulnerability is addressed by upgr...

CVE-2017-13003

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

CVE-2017-13007

The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktapifprint...

CVE-2017-13001

CVE-2017-13001 affects tcpdump prior to 4.9.2 where the NFS parser in nfs_printfh() has a buffer over-read. Public sources (NVD entry for tcpdump 4.9.2 fix; Debian DSA-3971-1 and Debian LTS advisory; IBM AIX/tcpdump advisory) confirm the issue is in the NFS parser and fixed by updating to tcpdump...

CVE-2017-13014

The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wbprep, several functions...

CVE-2017-13013

The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions...

CVE-2017-13015

The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eapprint...

CVE-2017-13016

tcpdump (affected component: ISO ES-IS parser) has a buffer overread in esis_print() of print-isoclns.c, leading to potential information disclosure. Affected versions are prior to 4.9.2. Remediation: upgrade to tcpdump 4.9.2 or later. The issue is documented under CVE-2017-13016; other related C...