huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2017-12985: tcpdump: Buffer over-read in print-ip6.c:ip6_print() in IPv6 parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 66df248b49095c261138b5a5e34d341a6bf9ac7f
CVE-2017-12986: tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 7ac73d6cd41e9d4ac0ca7e6830ca390e195bb21c
CVE-2017-12987: tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 99798bd9a41bd3d03fdc1e949810a38967f20ed3
CVE-2017-12988: tcpdump: Buffer over-read in print-telnet.c:telnet_parse() in telnet parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 8934a7d6307267d301182f19ed162563717e29e3
CVE-2017-12989: tcpdump: Infinite loop due to a bug in print-resp.c:resp_get_length() in RESP parser
Component: tcpdump
Severity: Low
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: db24063b01cba8e9d4d88b7d8ac70c9000c104e4
CVE-2017-12990: tcpdump: Infinite loop due to bugs in print-isakmp.c, several functions in ISAKMP parser
Component: tcpdump
Severity: Low
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: c2ef693866beae071a24b45c49f9674af1df4028
CVE-2017-12991: tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 50a44b6b8e4f7c127440dbd4239cf571945cc1e7
CVE-2017-12992: tcpdump: Buffer over-read in print-ripng.c:ripng_print() in RIPng parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: e942fb84fbe3a73a98a00d2a279425872b5fb9d2
CVE-2017-12993: tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: b534e304568585707c4a92422aeca25cf908ff02
CVE-2017-12994: tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: ffde45acf3348f8353fb4064a1b21683ee6b5ddf
CVE-2017-12995: tcpdump: Infinite loop due to a bug in print-domain.c:ns_print() in DNS parser
Component: tcpdump
Severity: Low
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 3a76fd7c95fced2c2f8c8148a9055c3a542eff29
CVE-2017-12996: tcpdump: Buffer over-read in print-pim.c:pimv2_print() in PIMv2 parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 6fca58f5f9c96749a575f52e20598ad43f5bdf30
CVE-2017-12997: tcpdump: Infinite loop due to a bug in print-lldp.c:lldp_private_8021_print() in LLDP parser
Component: tcpdump
Severity: Low
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 34cec721d39c76be1e0a600829a7b17bdfb832b6
CVE-2017-12998: tcpdump: Buffer over-read in print-isoclns.c:isis_print_extd_ip_reach() in IS-IS parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 979dcefd7b259e9e233f77fe1c5312793bfd948f
CVE-2017-12999: tcpdump: Buffer over-read in print-isoclns.c:isis_print() in IS-IS parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 3b32029db354cbc875127869d9b12a9addc75b50
CVE-2017-13000: tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 8512734883227c11568bb35da1d48b9f8466f43f
CVE-2017-13001: tcpdump: Buffer over-read in print-nfs.c:nfs_printfh() in NFS parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 7a923447fd49a069a0fd3b6c3547438ab5ee2123
CVE-2017-13002: tcpdump: Buffer over-read in print-aodv.c:aodv_extension() in AODV parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: cbddb98484ea8ec1deece351abd56e063d775b38
CVE-2017-13003: tcpdump: Buffer over-read in print-lmp.c:lmp_print() in LMP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: a25211918f2e790c67d859d20ccf8dbb81da1598
CVE-2017-13004: tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 42073d54c53a496be40ae84152bbfe2c923ac7bc
CVE-2017-13005: tcpdump: Buffer over-read in print-nfs.c:xid_map_enter() in NFS parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: b45a9a167ca6a3ef2752ae9d48d56ac14b001bfd
CVE-2017-13006: tcpdump: Buffer over-read in print-l2tp.c, several functions in L2TP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: cc4a7391c616be7a64ed65742ef9ed3f106eb165
CVE-2017-13007: tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: ca336198e8bebccc18502de27672fdbd6eb34856
CVE-2017-13008: tcpdump: Buffer over-read in print-802_11.c:parse_elements() in IEEE 802.11 parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 5edf405d7ed9fc92f4f43e8a3d44baa4c6387562
CVE-2017-13009: tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: db8c799f6dfc68765c9451fcbfca06e662f5bd5f
CVE-2017-13010: tcpdump: Buffer over-read in print-beep.c:l_strnstart() in BEEP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 877b66b398518d9501513e0860c9f3a8acc70892
CVE-2017-13011: tcpdump: Buffer overflow in util-print.c:bittok2str_internal()
Component: tcpdump
Severity: Moderate
CWE: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

A vulnerability was found in tcpdump's verbose printing of packet data. A crafted pcap file or specially crafted network traffic could cause tcpdump to write out of bounds in the BSS segment, potentially causing tcpdump to display truncated or incorrectly decoded fields or crash with a segmentation violation. This does not affect tcpdump when used with the -w option to save a pcap file.


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 9f0730bee3eb65d07b49fd468bc2f269173352fe
CVE-2017-13012: tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 8509ef02eceb2bbb479cea10fe4a7ec6395f1a8b
CVE-2017-13013: tcpdump: Buffer over-read in print-arp.c, several functions in ARP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 13ab8d18617d616c7d343530f8a842e7143fb5cc
CVE-2017-13014: tcpdump: Buffer over-read in print-wb.c:wb_prep(), several functions in White Board protocol parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: cc356512f512e7fa423b3674db4bb31dbe40ffec
CVE-2017-13015: tcpdump: Buffer over-read in print-eap.c:eap_print() in EAP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 985122081165753c7442bd7824c473eb9ff56308
CVE-2017-13016: tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: c177cb3800a9a68d79b2812f0ffcb9479abd6eb8
CVE-2017-13017: tcpdump: Buffer over-read in print-dhcp6.c:dhcp6opt_print() in DHCPv6 parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 11b426ee05eb62ed103218526f1fa616851c43ce
CVE-2017-13018: tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 26a6799b9ca80508c05cac7a9a3bef922991520b
CVE-2017-13019: tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 4601c685e7fd19c3724d5e499c69b8d3ec49933e
CVE-2017-13020: tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: d692d67332bcc90540088ad8e725eb3279e39863
CVE-2017-13021: tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 67c7126062d59729cd421bb38f9594015c9907ba
CVE-2017-13022: tcpdump: Buffer over-read in print-ip.c:ip_printroute() in IP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: eee0b04bcfdae319c242b0b8fc3d07029ee65b8c
CVE-2017-13023: tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: b8e559afaeb8fe0604a1f8e3ad4dc1445de07a00
CVE-2017-13024: tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 2e1f6d9320afa83abc1ff716c7981fa504edadf2
CVE-2017-13025: tcpdump: Buffer over-read in print-mobility.c:mobility_opt_print() in IPv6 mobility parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 5338aac7b8b880b0c5e0c15e27dadc44c5559284
CVE-2017-13026: tcpdump: Buffer over-read in print-isoclns.c, several functions in ISO IS-IS parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: b20e1639dbac84b3fcb393858521c13ad47a9d70