CVE-2017-13004

CVE-2017-13004 affects tcpdump prior to 4.9.2, where the Juniper protocols parser (print-juniper.c, juniper_parse_header) can trigger a buffer over-read. This could lead to information disclosure or crash under crafted input. Affected software: tcpdump. Mitigation: upgrade to tcpdump 4.9.2 or app...

CVE-2017-13038

The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handlemlppp...

CVE-2017-13001

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfsprintfh...

CVE-2017-13001

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfsprintfh...

CVE-2017-13048

The CVE-2017-13048 entry affects tcpdump prior to 4.9.2, caused by a buffer over-read in print-rsvp.c:rsvp_obj_print() within the RSVP parser. Public advisories (Debian, Debian security tracker, and IBM AIX bulletin) confirm the issue and reference the same code path. Affected versions include tc...

CVE-2017-13045

The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqpprint...

CVE-2017-13045

The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqpprint...

CVE-2017-13037

The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ipprintts...

CVE-2017-13000

CVE-2017-13000 affects tcpdump, specifically the IEEE 802.15.4 parser. The vulnerability is a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print(), which could allow a remote attacker to obtain sensitive information. The issue is fixed in tcpdump version 4.9.2 (as noted in the IBM AIX adv...

CVE-2017-13033

The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtpprint...

CVE-2017-12990

The ISAKMP parser in tcpdump versions prior to 4.9.2 is susceptible to an infinite loop vulnerability. This issue originates from bugs within several functions in the print-isakmp.c file. While the impact is associated with a high severity level in some metrics, it specifically relates to potenti...

CVE-2017-12894

Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookupbytestring...

CVE-2017-13047

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...

CVE-2017-13048

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...

CVE-2017-13028

CVE-2017-13028 (tcpdump) affects tcpdump prior to 4.9.2, describing a buffer over-read in the BOOTP parser (print-bootp.c:bootp_print()). The connected Debian/DSA advisories and upstream tcpdump notes confirm the issue and list 4.9.2 as the fix. Remediation: upgrade tcpdump to version 4.9.2 or la...

CVE-2017-13023

tcpdump before 4.9.2 is affected by a buffer over-read in the IPv6 mobility parser (print-mobility.c: mobility_opt_print). CVE-2017-13023 is documented with high-severity impact and information disclosure potential; remediation is to upgrade tcpdump to 4.9.2 or later. Public advisories summarize ...

CVE-2017-13689

The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1idprint...

CVE-2017-13023

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-13052

CVE-2017-13052 affects tcpdump’s CFM parser. The buffer over-read occurs in print-cfm.c:cfm_print() prior to tcpdump 4.9.2. A fix is available in version 4.9.2 (update to 4.9.2 or later). In the accompanying advisories, tcpdump vulnerabilities were addressed by upgrading to 4.9.2, indicating reme...

CVE-2017-13037

CVE-2017-13037 concerns tcpdump prior to 4.9.2, where the IP parser in print-ip.c:ip_printts() has a buffer overread. It could allow a remote attacker to obtain sensitive information. Public advisories confirm fixes in tcpdump 4.9.2 and later; Debian also lists this as addressed in DSA-3971-1. Im...