3967 matches found
PT-2017-12898
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the LLDP parser, specifically in the lldp private 8023 print function within the print-lldp.c file. Recommendations For versions prior to 4.9.2, update t...
PT-2017-12883
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the MPTCP parser, specifically in the print-mptcp.c file, affecting several functions. Recommendations For versions prior to 4.9.2, update to version 4.9...
PT-2017-12897
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the BGP parser, specifically in the decode rt routing info function within print-bgp.c. Recommendations For versions prior to 4.9.2, update to version...
PT-2017-13018
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 ALT Linux affected versions not specified Description The issue concerns a buffer over-read in the IKEv1 parser, specifically in the ikev1 id print function within print-isakmp.c. This problem affects the tcpdum...
PT-2017-12879
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the IP parser, specifically in the ip printts function within print-ip.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or later t...
PT-2017-12894
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the RPKI-Router parser, specifically in the rpki rtr pdu print function within the print-rpki-rtr.c file. This problem can lead to potential data exposur...
PT-2017-13017
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 ALT Linux affected versions not specified Description The issue is related to a buffer over-read in the OLSR parser. There is no information provided about the estimated number of potentially affected devices...
PT-2017-12891
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the RSVP parser, specifically in the rsvp obj print function within print-rsvp.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or...
PT-2017-12880
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the PPP parser, specifically in the handle mlppp function within print-ppp.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or lat...
PT-2017-12899
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the ISO IS-IS parser, specifically in the isis print is reach subtlv function within print-isoclns.c. Recommendations For versions prior to 4.9.2, update...
PT-2017-13016
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 ALT Linux affected versions not specified Description The issue is related to a buffer over-read in the Cisco HDLC parser. There is no information provided about the estimated number of potentially affected...
[slackware-security] tcpdump
New tcpdump packages are available for Slackware 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/tcpdump-4.9.2-i586-1slack14.2.txz: Upgraded. This update fixes bugs and many security issues see the included...
Pulse Policy Secure Cross-Site Request Forgery (SA40793)
According to its self-reported version, the version of Pluse Policy Secure running on the remote host is affected by a cross-site request forgery vulnerability in diag.cgi. This vulnerability may allow remote attackers to hijack the authentication of administrators for requests to start tcpdump. ...
Pulse Connect Secure Cross-Site Request Forgery (SA40793)
According to its self-reported version, the version of Pluse Connect Secure running on the remote host is affected by a cross-site request forgery vulnerability in diag.cgi. This vulnerability may allow remote attackers to hijack the authentication of administrators for requests to start tcpdump....
EulerOS 2.0 SP1 : tcpdump (EulerOS-SA-2017-1179)
According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker...
EulerOS 2.0 SP2 : tcpdump (EulerOS-SA-2017-1180)
According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker...
Debian DLA-1090-1 : tcpdump security update
Several vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer. These vulnerabilities might result in denial of service application crash. For Debian 7 'Wheezy', these problems have been fixed in version 4.9.0-1deb7u2. We recommend that you upgrade your tcpdump...
Z3sec: A ZigBee Penetration Testing Framework
PenTestIT RSS Feed All of us know that ZigBee is an IEEE 802.15.4-based low-power, low data rate, and close proximity wireless ad-hoc network. There is now a tool - Z3sec, that can help you perform penetration tests on a multitude of Internet of Things IoT devices that implement the ZigBee...
[SECURITY] [DLA 1090-1] tcpdump security update
Package : tcpdump Version : 4.9.0-1deb7u2 CVE ID : CVE-2017-11108 CVE-2017-11541 CVE-2017-11542 CVE-2017-11543 Several vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer. These vulnerabilities might result in denial of service application crash. For Debian 7...
