CVE-2017-12988

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...

CVE-2017-13006

CVE-2017-13006 affects tcpdump prior to 4.9.2, where the L2TP parser in print-l2tp.c has a buffer over-read/memory over-read issue in the L2TP component. This could allow a remote attacker to obtain sensitive information via crafted traffic over the network. The vulnerability is addressed by upgr...

CVE-2017-12985

CVE-2017-12985 affects tcpdump’s IPv6 parser. The description in the CVE notes a buffer over-read in ip6_print() within print-ip6.c, and connected advisories confirm tcpdump before 4.9.2 is vulnerable. Impact is described as potential exposure via memory overread, with CVSS v3.0/3.1 vectors indic...

CVE-2017-13028

The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootpprint...

CVE-2017-13055

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintisreachsubtlv...

CVE-2017-12990

The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions...

CVE-2017-13009

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...

CVE-2017-12896

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmprfc3948print...

CVE-2017-13052

The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfmprint...

CVE-2017-13036

CVE-2017-13036 affects tcpdump: the OSPFv3 parser in tcpdump before 4.9.2 has a memory over-read/overflow in print-ospf6.c:ospf6_decode_v3(), described in CNVD-2017-28273 as a buffer overflow in OSPFv3. This remote vulnerability could enable a crash or potential information leakage. The public de...

CVE-2017-13688

The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsrprint...

CVE-2017-13045

CVE-2017-13045 affects tcpdump prior to 4.9.2 via a buffer over-read in the VQP parser (print-vqp.c:vqp_print). This can potentially disclose information from memory due to a over-read in the VQP path. The CVSS vectors indicate a high-severity, network-exposed issue with substantial impact across...

CVE-2017-13044

The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4print...

CVE-2017-12994

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...

CVE-2017-12997

The LLDP parser in tcpdump versions before 4.9.2 is vulnerable to a bug in print-lldp.c:lldp_private_8021_print(), which can cause the program to enter an infinite loop . While several security advisories and scanner plugins confirm this vulnerability, specific exploit details or in-the-wild expl...

CVE-2017-13725

CVE-2017-13725 affects tcpdump, with a buffer over-read in IPv6 routing header parser (print-rt6.c:rt6_print) mitigated by upgrading to tcpdump 4.9.2. The vulnerability could enable information disclosure or trigger a crash due to memory handling weaknesses in the IPv6 routing header path. Remedi...

CVE-2017-12897

The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclnsprint...

CVE-2017-12897

The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclnsprint...

CVE-2017-12897

The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclnsprint...

CVE-2017-12897

CVE-2017-12897 affects tcpdump. The ISO CLNS parser has a buffer over-read in print-isoclns.c:isoclns_print, exploitable via network access. CVSSv3 base score 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Consequences include potential data disclosure or crash, as detailed in public adviso...