4550 matches found
CVE-2017-13009
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...
CVE-2017-12995
The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...
CVE-2017-13051
The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...
CVE-2017-13002
tcpdump 4.x before 4.9.2 contains a buffer over-read in the AODV parser (print-aodv.c:aodv_extension). This is CVE-2017-13002. The issue stems from reading memory beyond bounds in the AODV extension handling, which could crash the application or cause memory disclosure. Fix: upgrade tcpdump to 4....
CVE-2017-13024
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...
CVE-2017-12988
CVE-2017-12988 affects tcpdump prior to 4.9.2, due to a buffer over-read in telnet_parse() within print-telnet.c. This could allow a remote attacker to obtain sensitive information. The issue is fixed by upgrading to tcpdump 4.9.2 (as referenced in tcpdump advisory updates). If maintaining vulner...
CVE-2017-12989
The CVE-2017-12989 issue affects tcpdump before 4.9.2, where the RESP parser (print-resp.c:resp_get_length()) could enter an infinite loop, enabling a denial of service. Public sources show CVSSv3 base 7.5 (HIGH) with network access, low attack complexity, no authentication, and availability impa...
CVE-2017-13002
The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodvextension...
CVE-2017-13031
CVE-2017-13031 relates to tcpdump’s IPv6 fragmentation header parser, where a buffer over-read occurs in print-frag6.c:frag6_print() prior to version 4.9.2. The Initial Document confirms the flaw and notes the fix/update to 4.9.2. Connected documentation references multiple advisories and CVSS da...
CVE-2017-12901
This CVE concerns tcpdump's EIGRP parser. A buffer over-read in print-eigrp.c:eigrp_print() affects tcpdump before version 4.9.2, enabling a remote attacker to potentially access sensitive information. The issue is mitigated by upgrading to tcpdump 4.9.2 or later, which contains the fix. If upgra...
CVE-2017-13725
The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6print...
CVE-2017-12894
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookupbytestring...
CVE-2017-12995
The DNS parser in tcpdump versions prior to 4.9.2 is vulnerable to an infinite loop due to a bug located in print-domain.c:ns_print(). This flaw can lead to a denial of service condition. While specific exploit details are not provided in the documents, the vulnerability is documented across mult...
CVE-2017-13046
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...
CVE-2017-13011
tcpdump CVE-2017-13011 is a vulnerability in bittok2str_internal() that can cause a buffer overflow in multiple protocol parsers. The issue affects tcpdump releases prior to 4.9.2, and has been addressed by upgrading to tcpdump 4.9.2 (as reflected in Debian DSA-3971-1/DSA-3971-1, IBM AIX advisori...
CVE-2017-13012
The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...
CVE-2017-12895
The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...
CVE-2017-12999
tcpdump contains a buffer over-read in the IS-IS parser (print-isoclns.c:isis_print) affecting the tcpdump project; CVE-2017-12999 is documented in multiple advisories. Publicly disclosed details show the issue exists in tcpdump prior to version 4.9.2 and has been addressed by upgrading to tcpdum...