Debian: Security Advisory (DSA-3971-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-13049

The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubikprint...

tcprewrite - Heap Buffer Overflow

Title: tcprewrite Heap-Based Buffer Overflow CVE: CVE-2017-14266 CWE: CWE-122 Exploit Author: Hosein AskariFarazPajohan Vendor HomePage: http://tcpreplay.synfin.net/ Product Description: When you want to give a PCAP file to someone, it gives away certain sensitive information such as an...

Slackware 13.37 / 14.0 / 14.1 / 14.2 / current : tcpdump (SSA:2017-251-03)

New tcpdump packages are available for Slackware 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2017-251-03. The text itself i...

MGASA-2017-0335 Updated tcpdump packages fix security vulnerabilities

Summary for 4.9.2 tcpdump release Do not use getprotobynumber for protocol name resolution. Do not do any protocol name resolution if -n is specified. Improve errors detection in the test scripts. Fix a segfault with OpenSSL 1.1 and improve OpenSSL usage. Clean up IS-IS printing. Fix buffer...

Updated tcpdump packages fix security vulnerabilities

Summary for 4.9.2 tcpdump release Do not use getprotobynumber for protocol name resolution. Do not do any protocol name resolution if -n is specified. Improve errors detection in the test scripts. Fix a segfault with OpenSSL 1.1 and improve OpenSSL usage. Clean up IS-IS printing. Fix buffer...

PT-2017-12836

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a bug in the LLDP parser, which could cause an infinite loop due to a problem in the lldp private 8021 print function. This could potentially allow a remote attacker to obtain...

PT-2017-12757

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the ISAKMP parser, specifically in the isakmp rfc3948 print function. This could allow a remote attacker to obtain sensitive information by sending a...

PT-2017-12895

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the RSVP parser, specifically in the rsvp obj print function within print-rsvp.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or...

PT-2017-13020

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 ALT Linux affected versions not specified Description The issue concerns a buffer over-read in the IKEv2 parser, specifically within the print-isakmp.c file, affecting several functions. Recommendations For...

PT-2017-12845

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue concerns a buffer over-read in the NFS parser component of tcpdump, specifically in the xid map enter function within print-nfs.c. This could allow a remote attacker to obtain sensitive...

PT-2017-12842

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the AODV parser, specifically in the aodv extension function within print-aodv.c. This problem can lead to potential data exposure or crashes...

PT-2017-12844

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the Juniper protocols parser, specifically in the juniper parse header function within print-juniper.c. This affects the tcpdump protocol analyzer...

PT-2017-12878

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the OSPFv3 parser, specifically in the ospf6 decode v3 function within print-ospf6.c. This function is used for decoding OSPFv3 packets. Recommendations...

PT-2017-12889

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the BGP parser, specifically in the bgp attr print function within print-bgp.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or...

PT-2017-12758

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the ISO CLNS parser of tcpdump, specifically in the isoclns print function. This could allow a remote attacker to obtain sensitive information by sending...

PT-2017-12831

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the RIPng parser, specifically in the ripng print function within print-ripng.c. This could allow a remote attacker to obtain sensitive information by...

PT-2017-12832

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the Juniper protocols parser, specifically in the print-juniper.c file, affecting several functions. This could allow a remote attacker to obtain sensiti...

PT-2017-12838

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the IS-IS parser, specifically in the isis print function within print-isoclns.c. This problem can lead to potential security issues due to the over-read...

PT-2017-12854

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the ARP parser component of tcpdump, specifically in the print-arp.c file, affecting several functions. This could allow a remote attacker to obtain...