CVE-2017-13038

tcpdump CVE-2017-13038: A buffer over-read in the PPP parser (print-ppp.c handle_mlppp) affects tcpdump versions before 4.9.2. The issue can enable information disclosure and potential crash. Affected component: PPP parser in tcpdump; root cause: out-of-bounds read in PPP handling. Impact per CVS...

CVE-2017-12995

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:nsprint...

CVE-2017-12987

The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-80211.c:parseelements...

CVE-2017-13043

The CVE-2017-13043 entry refers to tcpdump before 4.9.2, which has a buffer over-read in the BGP parser (print-bgp.c:decode_multicast_vpn). The connected advisories confirm multiple tcpdump issues in the 2017 timeframe and explicitly note that the fix is upgrading to tcpdump 4.9.2. In practice, t...

CVE-2017-13043

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodemulticastvpn...

CVE-2017-13043

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodemulticastvpn...

CVE-2017-12896

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmprfc3948print...

CVE-2017-13028

The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootpprint...

CVE-2017-13016

tcpdump (affected component: ISO ES-IS parser) has a buffer overread in esis_print() of print-isoclns.c, leading to potential information disclosure. Affected versions are prior to 4.9.2. Remediation: upgrade to tcpdump 4.9.2 or later. The issue is documented under CVE-2017-13016; other related C...

CVE-2017-13687

CVE-2017-13687 affects tcpdump, specifically the Cisco HDLC parser: a buffer over-read in print-chdlc.c:chdlc_print() present in tcpdump prior to version 4.9.2. Connected documents confirm this is tied to the Cisco HDLC parser within tcpdump and describe the vulnerability as a buffer over-read/ov...

CVE-2017-12992

The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripngprint...

CVE-2017-12992

CVE-2017-12992 affects tcpdump’s RIPng parser. A buffer over-read in print-ripng.c:ripng_print() could enable an attacker to read memory via a specially crafted RIPng packet. The advisories indicate tcpdump versions before 4.9.2 are vulnerable; upgrading to 4.9.2 or later fixes the issue. Other c...

CVE-2017-12992

The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripngprint...

CVE-2017-12992

The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripngprint...

CVE-2017-13004

The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniperparseheader...

CVE-2017-13021

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6print...

CVE-2017-13000

The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802154.c:ieee802154ifprint...

CVE-2017-12898

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interpreply...

CVE-2017-13054

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpprivate8023print...

CVE-2017-13017

The CVE-2017-13017 entry affects tcpdump’s DHCPv6 parser: a buffer over-read in print-dhcp6.c:dhcp6opt_print() prior to version 4.9.2. This could allow a remote attacker to access sensitive information (as per CVSS/NC notes; high severity). The documented remediation is to upgrade to tcpdump 4.9....