4550 matches found
CVE-2017-13009
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...
CVE-2017-13026
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions...
CVE-2017-12896
The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmprfc3948print...
CVE-2017-13052
The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfmprint...
CVE-2017-12902
The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions...
CVE-2017-13036
CVE-2017-13036 affects tcpdump: the OSPFv3 parser in tcpdump before 4.9.2 has a memory over-read/overflow in print-ospf6.c:ospf6_decode_v3(), described in CNVD-2017-28273 as a buffer overflow in OSPFv3. This remote vulnerability could enable a crash or potential information leakage. The public de...
CVE-2017-13688
The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsrprint...
CVE-2017-13045
CVE-2017-13045 affects tcpdump prior to 4.9.2 via a buffer over-read in the VQP parser (print-vqp.c:vqp_print). This can potentially disclose information from memory due to a over-read in the VQP path. The CVSS vectors indicate a high-severity, network-exposed issue with substantial impact across...
CVE-2017-13044
The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4print...
CVE-2017-13012
CVE-2017-13012 affects tcpdump’s ICMP parser (print-icmp.c:icmp_print) with a buffer over-read in versions prior to 4.9.2. Multiple sources (NVD entry, Debian/DSA-3971-1, Ubuntu/USN-3415-1, IBM AIX advisory) confirm the flaw and that upgrading to tcpdump 4.9.2 (or applying the vendor patch) mitig...
CVE-2017-12994
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint...
CVE-2017-12997
The LLDP parser in tcpdump versions before 4.9.2 is vulnerable to a bug in print-lldp.c:lldp_private_8021_print(), which can cause the program to enter an infinite loop . While several security advisories and scanner plugins confirm this vulnerability, specific exploit details or in-the-wild expl...
CVE-2017-13725
CVE-2017-13725 affects tcpdump, with a buffer over-read in IPv6 routing header parser (print-rt6.c:rt6_print) mitigated by upgrading to tcpdump 4.9.2. The vulnerability could enable information disclosure or trigger a crash due to memory handling weaknesses in the IPv6 routing header path. Remedi...
CVE-2017-12897
The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclnsprint...
CVE-2017-12897
The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclnsprint...
CVE-2017-12897
The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclnsprint...
CVE-2017-12897
CVE-2017-12897 affects tcpdump. The ISO CLNS parser has a buffer over-read in print-isoclns.c:isoclns_print, exploitable via network access. CVSSv3 base score 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Consequences include potential data disclosure or crash, as detailed in public adviso...
CVE-2017-12998
tcpdump before 4.9.2 has a buffer over-read in the IS-IS parser (print-isoclns.c:isis_print_extd_ip_reach) that could allow a remote attacker to obtain sensitive information; upgrade to tcpdump 4.9.2 or later to fix.