4550 matches found
CVE-2017-13044
The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4print...
CVE-2017-13000
The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802154.c:ieee802154ifprint...
CVE-2017-12987
The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-80211.c:parseelements...
CVE-2017-13008
The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-80211.c:parseelements...
CVE-2017-13007
CVE-2017-13007 affects tcpdump prior to 4.9.2. The Apple PKTAP parser can over-read a buffer in print-pktap.c:pktap_if_print(), potentially enabling a crash or partial data exposure. The issue is mitigated by upgrading tcpdump to version 4.9.2 or later (as reflected in multiple advisories). The p...
CVE-2017-12898
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interpreply...
CVE-2017-13028
The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootpprint...
CVE-2017-13054
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpprivate8023print...
CVE-2017-13017
The CVE-2017-13017 entry affects tcpdump’s DHCPv6 parser: a buffer over-read in print-dhcp6.c:dhcp6opt_print() prior to version 4.9.2. This could allow a remote attacker to access sensitive information (as per CVSS/NC notes; high severity). The documented remediation is to upgrade to tcpdump 4.9....
CVE-2017-13028
The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootpprint...
CVE-2017-13032
The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:printattrstring...
CVE-2017-12997
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...
CVE-2017-13054
CVE-2017-13054 affects tcpdump and is a buffer over-read in the LLDP parser (print-lldp.c: lldp_private_8023_print()). The IBM AIX bulletin and Debian security notes confirm the vulnerability could allow a remote attacker to obtain sensitive information and cause information exposure via the LLDP...
CVE-2017-13014
CVE-2017-13014 relates to tcpdump prior to 4.9.2, where the White Board protocol parser (print-wb.c: wb_prep and related paths) has a buffer over-read/over-read condition. This could allow an attacker to access sensitive memory or information when processing crafted traffic. The affected product ...
CVE-2017-13002
The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodvextension...
CVE-2017-12991
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...
CVE-2017-12894
tcpdump is vulnerable to a buffer over-read in addrtoname.c:lookup_bytestring() affecting multiple protocol parsers; impact includes potential information exposure. The issue was fixed by upgrading to tcpdump 4.9.2 (applies to affected releases). References point to the tcpdump commit and related...
CVE-2017-13030
CVE-2017-13030 refers to tcpdump before 4.9.2, which contains a buffer over-read in the PIM parser (print-pim.c). The affected component is the PIM multicast parser in tcpdump; the issue arises from reading past the end of a buffer, potentially enabling information disclosure or a crash. The CVSS...