CVE-2017-13027

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpmgmtaddrtlvprint...

CVE-2017-13027

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpmgmtaddrtlvprint...

CVE-2017-13026

CVE-2017-13026 affects the tcpdump ISO IS-IS parser. The vulnerability is a buffer over-read in print-isoclns.c, present in tcpdump versions prior to 4.9.2. Upgrading to tcpdump 4.9.2 (or later) is the remediation. Public sources (Debian/CNVD/etc.) confirm the issue and the fix timeline; exploita...

CVE-2017-13030

The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions...

CVE-2017-13034

CVE-2017-13034 : The tcpdump PGM parser has a vulnerability in print-pgm.c:pgm_print() that allows a buffer over-read in tcpdump versions before 4.9.2. This is a memory-read issue in the PGM component, potentially enabling information disclosure or application instability. The vulnerability is do...

CVE-2017-13035

CVE-2017-13035 affects tcpdump’s ISO IS-IS parser. The issue is a buffer over-read in print-isoclns.c:isis_print_id() for tcpdump versions before 4.9.2, potentially allowing disclosure of sensitive information. Remediation: upgrade tcpdump to 4.9.2 or later. If upgrading is not possible, consult ...

CVE-2017-13025

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint...

CVE-2017-13010

The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:lstrnstart...

CVE-2017-12996

The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2print...

CVE-2017-12897

CVE-2017-12897 affects tcpdump. The ISO CLNS parser has a buffer over-read in print-isoclns.c:isoclns_print, exploitable via network access. CVSSv3 base score 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Consequences include potential data disclosure or crash, as detailed in public adviso...

CVE-2017-13038

The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handlemlppp...

CVE-2017-12992

CVE-2017-12992 affects tcpdump’s RIPng parser. A buffer over-read in print-ripng.c:ripng_print() could enable an attacker to read memory via a specially crafted RIPng packet. The advisories indicate tcpdump versions before 4.9.2 are vulnerable; upgrading to 4.9.2 or later fixes the issue. Other c...

CVE-2017-12990

The ISAKMP parser in tcpdump versions prior to 4.9.2 is susceptible to an infinite loop vulnerability. This issue originates from bugs within several functions in the print-isakmp.c file. While the impact is associated with a high severity level in some metrics, it specifically relates to potenti...

CVE-2017-12894

Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookupbytestring...

CVE-2017-13047

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...

CVE-2017-13047

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esisprint...

CVE-2017-13048

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...

CVE-2017-13047

CVE-2017-13047: tcpdump before 4.9.2 has a buffer over-read in the ISO ES-IS parser (print-isoclns.c: esis_print). The issue can lead to memory disclosure when processing certain packets. Affected product: tcpdump; vulnerable component: ISO ES-IS parser; root cause: out-of-bounds read in esis_pri...

CVE-2017-13028

CVE-2017-13028 (tcpdump) affects tcpdump prior to 4.9.2, describing a buffer over-read in the BOOTP parser (print-bootp.c:bootp_print()). The connected Debian/DSA advisories and upstream tcpdump notes confirm the issue and list 4.9.2 as the fix. Remediation: upgrade tcpdump to version 4.9.2 or la...

CVE-2017-13023

tcpdump before 4.9.2 is affected by a buffer over-read in the IPv6 mobility parser (print-mobility.c: mobility_opt_print). CVE-2017-13023 is documented with high-severity impact and information disclosure potential; remediation is to upgrade tcpdump to 4.9.2 or later. Public advisories summarize ...