CVE-2016-7925

tcpdump: multiple overflow issues in protocol decoding

The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl_if_print().

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-7924

tcpdump: multiple overflow issues in protocol decoding

The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print().

CVSS 3.0 · 9.8 Critical EPSS 3.5% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-7923

tcpdump: multiple overflow issues in protocol decoding

The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print().

CVSS 3.0 · 9.8 Critical EPSS 3.4% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-7922

tcpdump: multiple overflow issues in protocol decoding

The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print().

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-13690

tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser

The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.

CVSS 3.0 · 9.8 Critical EPSS 3.4% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-13725

tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser

The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().

CVSS 3.1 · 9.8 Critical EPSS 3.3% KEV · Not listed

Vendors

Debian Redhat Tcpdump

Products

Debian Linux Enterprise Linux Tcpdump

CVE-2017-5202

tcpdump: multiple overflow issues in protocol decoding

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().

CVSS 3.0 · 9.8 Critical EPSS 3.8% KEV · Not listed

Vendors

Debian Redhat Tcpdump

Products

Debian Linux Enterprise Linux Enterprise Linux Desktop and 6 more

CVE-2017-5203

tcpdump: multiple overflow issues in protocol decoding

The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().

CVSS 3.0 · 9.8 Critical EPSS 3.8% KEV · Not listed

Vendors

Debian Redhat Tcpdump

Products

Debian Linux Enterprise Linux Enterprise Linux Desktop and 6 more

CVE-2017-5204

tcpdump: multiple overflow issues in protocol decoding

The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print().

CVSS 3.0 · 9.8 Critical EPSS 6.0% KEV · Not listed

Vendors

Debian Redhat Tcpdump

Products

Debian Linux Enterprise Linux Enterprise Linux Desktop and 6 more

CVE-2017-5205

tcpdump: multiple overflow issues in protocol decoding

The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print().

CVSS 3.0 · 9.8 Critical EPSS 3.6% KEV · Not listed

Vendors

Debian Redhat Tcpdump

Products

Debian Linux Enterprise Linux Enterprise Linux Desktop and 6 more

CVE-2017-5341

tcpdump: multiple overflow issues in protocol decoding

The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print().

CVSS 3.0 · 9.8 Critical EPSS 5.3% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-5342

tcpdump: multiple overflow issues in protocol decoding

In tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print().

CVSS 3.0 · 9.8 Critical EPSS 5.5% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-5482

tcpdump: multiple overflow issues in protocol decoding

The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2016-8575.

CVSS 3.0 · 9.8 Critical EPSS 5.5% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-5483

tcpdump: multiple overflow issues in protocol decoding

The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse().

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-5484

tcpdump: multiple overflow issues in protocol decoding

The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print().

CVSS 3.0 · 9.8 Critical EPSS 6.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-5485

tcpdump: multiple overflow issues in protocol decoding

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap().

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-5486

tcpdump: multiple overflow issues in protocol decoding

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().

CVSS 3.0 · 9.8 Critical EPSS 3.4% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-7985

tcpdump: multiple overflow issues in protocol decoding

The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calm_fast_print().

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-12989

tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().

CVSS 3.0 · 7.5 High EPSS 2.3% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-12988

tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().

CVSS 3.0 · 9.8 Critical EPSS 2.4% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump