3977 matches found
CVE-2017-13010
The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:lstrnstart...
CVE-2017-13009
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...
CVE-2017-13011
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2strinternal...
CVE-2017-13026
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions...
CVE-2017-13026
CVE-2017-13026 affects the tcpdump ISO IS-IS parser. The vulnerability is a buffer over-read in print-isoclns.c, present in tcpdump versions prior to 4.9.2. Upgrading to tcpdump 4.9.2 (or later) is the remediation. Public sources (Debian/CNVD/etc.) confirm the issue and the fix timeline; exploita...
CVE-2017-13027
The CVE-2017-13027 entry concerns tcpdump’s LLDP parser. A buffer over-read in print-lldp.c:lddp_mgmt_addr_tlv_print() affects tcpdump prior to version 4.9.2, potentially enabling information disclosure or faulting the application when processing LLDP data. The vulnerability is confirmed in offic...
CVE-2017-13029
The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:printccpconfigoptions...
CVE-2017-13038
The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handlemlppp...
CVE-2017-13038
tcpdump CVE-2017-13038: A buffer over-read in the PPP parser (print-ppp.c handle_mlppp) affects tcpdump versions before 4.9.2. The issue can enable information disclosure and potential crash. Affected component: PPP parser in tcpdump; root cause: out-of-bounds read in PPP handling. Impact per CVS...
CVE-2017-13032
CVE-2017-13032 affects tcpdump prior to 4.9.2, reporting a buffer over-read in print-radius.c:print_attr_string() of the RADIUS parser. The initial document confirms the issue as a memory read vulnerability that could leak information, with CVSSv3/base score components indicating high severity (C...
CVE-2017-13032
The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:printattrstring...
CVE-2017-13689
CVE-2017-13689 concerns tcpdump’s IKEv1 parser. The vulnerability is a buffer over-read in print-isakmp.c:ikev1_id_print() affecting tcpdump versions before 4.9.2. This could enable a remote attacker to obtain sensitive information from memory. Public details in connected sources confirm the vuln...
CVE-2017-13688
The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsrprint...
CVE-2017-13045
The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqpprint...
CVE-2017-13041
CVE-2017-13041 concerns tcpdump’s ICMPv6 parser, where the icmp6_nodeinfo_print() function may read beyond a memory buffer in versions before 4.9.2. Affected software: tcpdump (network packet analyzer). Documented impact: buffer over-read that could lead to information disclosure or crash. CVSS d...
CVE-2017-13043
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodemulticastvpn...
CVE-2017-13043
The CVE-2017-13043 entry refers to tcpdump before 4.9.2, which has a buffer over-read in the BGP parser (print-bgp.c:decode_multicast_vpn). The connected advisories confirm multiple tcpdump issues in the 2017 timeframe and explicitly note that the fix is upgrading to tcpdump 4.9.2. In practice, t...
CVE-2017-12998
tcpdump before 4.9.2 has a buffer over-read in the IS-IS parser (print-isoclns.c:isis_print_extd_ip_reach) that could allow a remote attacker to obtain sensitive information; upgrade to tcpdump 4.9.2 or later to fix.
CVE-2017-12895
CVE-2017-12895 affects tcpdump prior to 4.9.2, describing a buffer over-read in the ICMP parser (print-icmp.c: icmp_print). This could allow a remote attacker to obtain sensitive information through crafted traffic. Mitigation: upgrade tcpdump to version 4.9.2 or newer; no other details (vectors,...