4550 matches found
CVE-2017-12899
The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnetprint...
CVE-2017-13041
The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6nodeinfoprint...
CVE-2017-13012
The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...
CVE-2017-13039
CVE-2017-13039 affects tcpdump before 4.9.2, with a buffer over-read in the ISAKMP parser (print-isakmp.c). CNVD-2017-28270 describes this as a denial-of-service risk via memory read/overrun, potentially causing an application crash. The known remediation is upgrading to tcpdump 4.9.2 or later (a...
CVE-2017-12893
The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:namelen...
CVE-2017-13022
tcpdump has a buffer over-read in print-ip.c:ip_printroute() (CVE-2017-13022). Debian's DSA-3971-1 and related advisories indicate the fix is in tcpdump 4.9.2 (and backported for various releases). Systems using tcpdump prior to 4.9.2 should upgrade to 4.9.2 or later to mitigate. The Debian advis...
CVE-2017-13008
The CVE-2017-13008 entry is valid and supported by connected documents. It affects tcpdump prior to 4.9.2, where the IEEE 802.11 parser (print-802_11.c:parse_elements) has a buffer over-read vulnerability. An attacker could potentially exploit this via crafted traffic to obtain sensitive informat...
CVE-2017-13014
The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wbprep, several functions...
CVE-2017-13029
CVE-2017-13029 affects tcpdump prior to 4.9.2, due to a buffer over-read in the PPP parser (print_ccp_config_options). An attacker could potentially obtain sensitive information by sending a crafted packet. A fix is available in tcpdump 4.9.2 (e.g., Debian/DSA-3971-1). Validation details and patc...
CVE-2017-13040
The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions...
CVE-2017-13046
tcpdump vulnerability CVE-2017-13046 is a buffer over-read in the BGP parser (bgp_attr_print in print-bgp.c) affecting tcpdump before version 4.9.2. This can allow a remote attacker to obtain sensitive information and may contribute to a memory-disclosure scenario. Public advisories (e.g., Debian...
CVE-2017-12997
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021print...
CVE-2017-12996
The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2print...
CVE-2017-12994
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...
CVE-2017-13053
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodertroutinginfo...
CVE-2017-13038
The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handlemlppp...
CVE-2017-12895
The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmpprint...
CVE-2017-13021
The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6print...