rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-12904 
Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item that includes shell code in its title and/or URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-23T14:00:00.000Z
CVE-2017-12905 
Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-25T17:00:00.000Z
CVE-2017-12906 
Multiple cross-site scripting (XSS) vulnerabilities in NexusPHP allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) cheaters.php or (2) confirm_resend.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T13:00:00.000Z
CVE-2017-12907 
Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the url path to usersearch.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-17T20:00:00.000Z
CVE-2017-12908 
SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-17T20:00:00.000Z
CVE-2017-12909 
SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-17T20:00:00.000Z
CVE-2017-12910 
SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-17T20:00:00.000Z
CVE-2017-12911 
The "apetag.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a stack memory corruption when opening a crafted MP3 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T14:00:00.000Z
CVE-2017-12912 
The "mpglibDBL/layer3.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a read access violation when opening a crafted MP3 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T14:00:00.000Z
CVE-2017-12919 
Heap-based buffer overflow in OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted fpx image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-12920 
CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-12921 
PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-12922 
wchar.c in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-12923 
OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-12924 
CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted fpx image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-12925 
Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted fpx image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-12927 
A cross-site scripting vulnerability exists in Cacti 1.1.17 in the method parameter in spikekill.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T02:00:00.000Z
CVE-2017-12928 
A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versions) allows remote attackers to log in via SSH and escalate privileges to root access with the same credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T16:00:00.000Z
CVE-2017-12929 
Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authenticated users to upload arbitrary files leading to Remote Command Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T16:00:00.000Z
CVE-2017-12930 
SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T16:00:00.000Z
CVE-2017-12932 
ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T03:00:00.000Z
CVE-2017-12933 
The finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.x before 7.1.7 is prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue can have an unspecified impact on the integrity of PHP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T03:00:00.000Z
CVE-2017-12934 
ext/standard/var_unserializer.re in PHP 7.0.x before 7.0.21 and 7.1.x before 7.1.7 is prone to a heap use after free while unserializing untrusted data, related to the zval_get_type function in Zend/zend_types.h. Exploitation of this issue can have an unspecified impact on the integrity of PHP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T03:00:00.000Z
CVE-2017-12935 
The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 mishandles large MNG images, leading to an invalid memory read in the SetImageColorCallBack function in magick/image.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T12:00:00.000Z
CVE-2017-12936 
The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T12:00:00.000Z
CVE-2017-12937 
The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has a colormap heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T12:00:00.000Z
CVE-2017-12938 
UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T13:00:00.000Z
CVE-2017-12939 
A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.8p2, 5.4.x before 5.4.5p5, 5.5.x before 5.5.4p3, 5.6.x before 5.6.3p1, and 2017.x before 2017.1.0p4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T13:00:00.000Z
CVE-2017-12940 
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T14:00:00.000Z
CVE-2017-12941 
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T14:00:00.000Z
CVE-2017-12942 
libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T14:00:00.000Z
CVE-2017-12943 
D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated by discovering the admin password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T15:00:00.000Z
CVE-2017-12944 
The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial of service (allocation failure and application crash) in the TIFFFetchStripThing function in tif_dirread.c during a tiff2pdf invocation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T15:00:00.000Z
CVE-2017-12945 
Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers to execute arbitrary commands as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-27T15:54:59.000Z
CVE-2017-12946 
classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T18:00:00.000Z
CVE-2017-12947 
classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T18:00:00.000Z
CVE-2017-12948 
Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-admin/admin.php, related to PHP_SELF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T18:00:00.000Z
CVE-2017-12949 
lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injection in the orderby parameter to wp-admin/admin.php, exploitable through CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T18:00:00.000Z
CVE-2017-12950 
The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-12951 
The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted gig file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-12952 
The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-12953 
The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory write and application crash) via a crafted gig file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-12954 
The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted gig file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-28T19:00:00.000Z
CVE-2017-12955 
There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T21:00:00.000Z
CVE-2017-12956 
There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T21:00:00.000Z
CVE-2017-12957 
There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T21:00:00.000Z
CVE-2017-12958 
There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T21:00:00.000Z
CVE-2017-12959 
There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T21:00:00.000Z
CVE-2017-12960 
There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T21:00:00.000Z
CVE-2017-12961 
There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T21:00:00.000Z
CVE-2017-12962 
There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, leading to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T21:00:00.000Z
CVE-2017-12963 
There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to CVE-2017-11555 but remains exploitable after the vendor's CVE-2017-11555 fix (available from GitHub after 2017-07-24).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T21:00:00.000Z
CVE-2017-12964 
There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cpp. It will lead to a remote denial of service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T21:00:00.000Z
CVE-2017-12965 
Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-23T16:00:00.000Z
CVE-2017-12966 
The asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service (segmentation fault) via a crafted .asn1 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-20T16:00:00.000Z
CVE-2017-12967 
The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a malformed tekhex binary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-19T16:00:00.000Z
CVE-2017-12969 
Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of service (heap corruption and crash) or execute arbitrary code via a long string to the open method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-11-09T19:00:00.000Z
CVE-2017-12970 
Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authentication of authenticated users for requests that (1) add or (2) delete user accounts via a request to phpsftpd/users.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-23T16:00:00.000Z
CVE-2017-12971 
Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the account parameter to phpsftpd/users.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-23T16:00:00.000Z
CVE-2017-12972 
In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext so that different plaintext is obtained for the same HMAC.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-20T16:00:00.000Z
CVE-2017-12973 
Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-20T16:00:00.000Z
CVE-2017-12974 
Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ensuring that the public x and y coordinates are on the specified curve, which allows attackers to conduct an Invalid Curve Attack in environments where the JCE provider lacks the applicable curve validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-20T16:00:00.000Z
CVE-2017-12976 
git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-20T20:00:00.000Z
CVE-2017-12977 
The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related to bwg_edit_tag() in photo-gallery.php and edit_tag() in admin/controllers/BWGControllerTags_bwg.php. It is exploitable by administrators via the tag_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-21T01:00:00.000Z
CVE-2017-12978 
lib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an authenticated user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-21T07:00:00.000Z
CVE-2017-12979 
DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/xhtml.php. An attacker can create or edit a wiki with this element to trigger JavaScript execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-21T07:00:00.000Z
CVE-2017-12980 
DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc/parser/xhtml.php. An attacker can create or edit a wiki that uses RSS or Atom data from an attacker-controlled server to trigger JavaScript execution. The JavaScript can be in an author field, as demonstrated by the dc:creator element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-21T07:00:00.000Z
CVE-2017-12981 
NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-21T07:00:00.000Z
CVE-2017-12982 
The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service (memory allocation failure) in the opj_image_create function in lib/openjp2/image.c, related to the opj_aligned_alloc_n function in opj_malloc.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-21T07:00:00.000Z
CVE-2017-12983 
Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-21T07:00:00.000Z
CVE-2017-12984 
PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/message_update.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-21T07:00:00.000Z
CVE-2017-12985 
The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12986 
The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12987 
The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12988 
The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12989 
The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z
CVE-2017-12990 
The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-14T06:00:00.000Z