Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-12971 State: PUBLISHED Published: 2017-08-23T16:00:00 Last Updated: 2024-08-05T18:51:07.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the account parameter to phpsftpd/users.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42520/ - http://hyp3rlinx.altervista.org/advisories/APACHE2TRIAD-SERVER-STACK-v1.5.4-MULTIPLE-CVE.txt - http://www.securityfocus.com/bid/100447 - http://packetstormsecurity.com/files/143863/Apache2Triad-1.5.4-CSRF-XSS-Session-Fixation.html
CVE ID: CVE-2017-12972 State: PUBLISHED Published: 2017-08-20T16:00:00 Last Updated: 2024-08-05T18:51:07.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext so that different plaintext is obtained for the same HMAC. Additional Analyst Notes: - CVE Program Container: References: - https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/224/byte-to-bit-overflow-in-cbc - https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/0d2bd649ea386539220d4facfe
es/224/byte-to-bit-overflow-in-cbc - https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/0d2bd649ea386539220d4facfe1f65eb1dadb86c - https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt - https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E
CVE ID: CVE-2017-12973 State: PUBLISHED Published: 2017-08-20T16:00:00Z Last Updated: 2024-09-17T01:37:10.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack. Additional Analyst Notes: - CVE Program Container: References: - https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/6a29f10f723f406eb25555f55842c59a43a38912 - https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/223/aescbc-return-immediately-on-invalid-hmac - https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt
CVE ID: CVE-2017-12974 State: PUBLISHED Published: 2017-08-20T16:00:00 Last Updated: 2024-08-05T18:51:07.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ensuring that the public x and y coordinates are on the specified curve, which allows attackers to conduct an Invalid Curve Attack in environments where the JCE provider lacks the applicable curve validation. Additional Analyst Notes: - CVE Program Container: References: - https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/217/explicit-check-for-ec-public-key-on-curve - https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt - https://
-check-for-ec-public-key-on-curve - https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt - https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/f3a7a801f0c6b078899fed9226368eb7b44e2b2f - https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E
CVE ID: CVE-2017-12976 State: PUBLISHED Published: 2017-08-20T20:00:00 Last Updated: 2024-08-05T18:51:07.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00004.html - http://source.git-annex.branchable.com/?p=source.git%3Ba=commit%3Bh=c24d0f0e8984576654e2be149005bc884fe0403a - ht
html - http://source.git-annex.branchable.com/?p=source.git%3Ba=commit%3Bh=c24d0f0e8984576654e2be149005bc884fe0403a - http://source.git-annex.branchable.com/?p=source.git%3Ba=commit%3Bh=df11e54788b254efebb4898b474de11ae8d3b471 - http://www.debian.org/security/2017/dsa-4010 - http://source.git-annex.branchable.com/?p=source.git%3Ba=blob%3Bf=doc/bugs/dashed_ssh_hostname_security_hole.mdwn
CVE ID: CVE-2017-12977 State: PUBLISHED Published: 2017-08-21T01:00:00Z Last Updated: 2024-09-16T19:11:00.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related to bwg_edit_tag() in photo-gallery.php and edit_tag() in admin/controllers/BWGControllerTags_bwg.php. It is exploitable by administrators via the tag_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/photo-gallery/#developers - https://github.com/jgj212/Advisories/blob/master/photo-gallery.1.3.50-SQL
CVE ID: CVE-2017-12978 State: PUBLISHED Published: 2017-08-21T07:00:00 Last Updated: 2024-08-05T18:51:07.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/commit/9c610a7a4e29595dcaf7d7082134e4b89619ea24 - http://www.securitytracker.com/id/1039226 - https://github.com/Cacti/cacti/issues/918 - https://github.com/Cacti/cacti/blob/develop/docs/CHANGELOG
CVE ID: CVE-2017-12979 State: PUBLISHED Published: 2017-08-21T07:00:00 Last Updated: 2024-08-05T18:51:07.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/xhtml.php. An attacker can create or edit a wiki with this element to trigger JavaScript execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/splitbrain/dokuwiki/issues/2080
CVE ID: CVE-2017-12980 State: PUBLISHED Published: 2017-08-21T07:00:00 Last Updated: 2024-08-05T18:51:07.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc/parser/xhtml.php. An attacker can create or edit a wiki that uses RSS or Atom data from an attacker-controlled server to trigger JavaScript execution. The JavaScript can be in an author field, as demonstrated by the dc:creator element. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/splitbrain/dokuwiki/issues/2081
CVE ID: CVE-2017-12981 State: PUBLISHED Published: 2017-08-21T07:00:00 Last Updated: 2024-08-05T18:51:07.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gitsucce/nexusphp/blob/master/nexusphp.md
CVE ID: CVE-2017-12982 State: PUBLISHED Published: 2017-08-21T07:00:00 Last Updated: 2024-08-05T18:51:07.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service (memory allocation failure) in the opj_image_create function in lib/openjp2/image.c, related to the opj_aligned_alloc_n function in opj_malloc.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uclouvain/openjpeg/commit/baf0c1ad4572daa89caa3b12985bdd93530f0dd7 - https://security.gentoo.org/glsa/201710-26 - http
m/uclouvain/openjpeg/commit/baf0c1ad4572daa89caa3b12985bdd93530f0dd7 - https://security.gentoo.org/glsa/201710-26 - https://blogs.gentoo.org/ago/2017/08/14/openjpeg-memory-allocation-failure-in-opj_aligned_alloc_n-opj_malloc-c/ - https://github.com/uclouvain/openjpeg/issues/983
CVE ID: CVE-2017-12983 State: PUBLISHED Published: 2017-08-21T07:00:00 Last Updated: 2024-08-05T18:51:07.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-4040 - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - https://www.debian.org/security/2017/dsa-4032 - https://github.com/ImageMagick/ImageMagick/issues/682
CVE ID: CVE-2017-12984 State: PUBLISHED Published: 2017-08-21T07:00:00 Last Updated: 2024-08-05T18:51:07.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/message_update.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.yuag.org/2016/08/17/phpmywind_5-3%E5%AD%98%E5%82%A8%E5%9E%8Bxss/ - https://www.exploit-db.com/exploits/42535/
CVE ID: CVE-2017-12985 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/66df248b49095c261138b5a5e34d341a6bf9ac7f - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12986 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://github.com/the-tcpdump-group/tcpdump/commit/7ac73d6cd41e9d4ac0ca7e6830ca390e195bb21c - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12987 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/99798bd9a41bd3d03fdc1e949810a38967f20ed3 - https://github.com/the-tcpdump-group/tcpdump/commit/2ecb9d2c67d9119250c54811a6ce4d0f2ddf44f1
03fdc1e949810a38967f20ed3 - https://github.com/the-tcpdump-group/tcpdump/commit/2ecb9d2c67d9119250c54811a6ce4d0f2ddf44f1 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12988 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/8934a7d6307267d301182f19ed162563717e29e3 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12989 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://github.com/the-tcpdump-group/tcpdump/commit/db24063b01cba8e9d4d88b7d8ac70c9000c104e4 - https://access.redhat.com/errata/RHE
hub.com/the-tcpdump-group/tcpdump/commit/db24063b01cba8e9d4d88b7d8ac70c9000c104e4 - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12990 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/c2ef693866beae071a24b45c49f9674af1df4028 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata
ttp://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12991 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/50a44b6b8e4f7c127440dbd4239cf571945cc1e7 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12992 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/e942fb84fbe3a73a98a00d2a279425872b5fb9d2 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12993 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://github.com/the-tcpdump-group/tcpdump/commit/b534e304568585707c4a92422aeca25cf908ff02 - https://access.redhat.com/errata/RHEA-
b.com/the-tcpdump-group/tcpdump/commit/b534e304568585707c4a92422aeca25cf908ff02 - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12994 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://github.com/the-tcpdump-group/tcpdump/commit/ffde45acf3348f8353fb4064a1b21683ee6b5ddf - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12995 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/3a76fd7c95fced2c2f8c8148a9055c3a542eff29 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018
fced2c2f8c8148a9055c3a542eff29 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12996 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/6fca58f5f9c96749a575f52e20598ad43f5bdf30 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12997 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/34cec721d39c76be1e0a600829a7b17bdfb832b6 - http://www.securityfocus.com/bid/100914 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-
- http://www.securityfocus.com/bid/100914 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12998 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/979dcefd7b259e9e233f77fe1c5312793bfd948f - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018
securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-12999 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/3b32029db354cbc875127869d9b12a9addc75b50 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13000 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://github.com/the-tcpdump-group/tcpdump/commit/8512734883227c11568bb35da1d48b9f8466f43f - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/a7e5f58f402e6919ec444a57946bade7dfd6b184 - http://www.securitytracker.com
://github.com/the-tcpdump-group/tcpdump/commit/a7e5f58f402e6919ec444a57946bade7dfd6b184 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://github.com/the-tcpdump-group/tcpdump/commit/9be4e0b5938b705e7e36cfcb110a740c6ff0cb97 - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13001 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/7a923447fd49a069a0fd3b6c3547438ab5ee2123 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13002 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:51:07.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/cbddb98484ea8ec1deece351abd56e063d775b38 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13003 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T18:58:11.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/a25211918f2e790c67d859d20ccf8dbb81da1598 - http://www.securitytracker.com/id/1039307 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705