Debian Tcpdump vulnerabilities

CVE-2016-8574 [CRITICAL] CVE-2016-8574: tcpdump - The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:fr... The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2003-1029 [MEDIUM] CVE-2003-1029: tcpdump - The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to... The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets. Scope: local bookworm: resolved (fixed in 3.8.3-1) bullseye: resolved (fixed in 3.8.3-1) for

CVE-2017-5341 [CRITICAL] CVE-2017-5341: tcpdump - The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_... The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7939 [CRITICAL] CVE-2016-7939: tcpdump - The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, mul... The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions. Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2017-5485 [CRITICAL] CVE-2017-5485: tcpdump - The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.... The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7929 [CRITICAL] CVE-2016-7929: tcpdump - The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in pr... The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper_parse_header(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7983 [CRITICAL] CVE-2016-7983: tcpdump - The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:... The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2017-5203 [CRITICAL] CVE-2017-5203: tcpdump - The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:... The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2017-5202 [CRITICAL] CVE-2017-5202: tcpdump - The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isocl... The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7940 [CRITICAL] CVE-2016-7940: tcpdump - The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, mul... The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions. Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2017-5483 [CRITICAL] CVE-2017-5483: tcpdump - The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:as... The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7986 [CRITICAL] CVE-2016-7986: tcpdump - The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-... The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions. Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7973 [CRITICAL] CVE-2016-7973: tcpdump - The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atal... The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions. Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7927 [CRITICAL] CVE-2016-7927: tcpdump - The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-80... The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7938 [CRITICAL] CVE-2016-7938: tcpdump - The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zerom... The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1_print_frame(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2017-13011 [CRITICAL] CVE-2017-13011: tcpdump - Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow i... Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-5205 [CRITICAL] CVE-2017-5205: tcpdump - The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.... The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7924 [CRITICAL] CVE-2016-7924: tcpdump - The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_... The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2017-5486 [CRITICAL] CVE-2017-5486: tcpdump - The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isocl... The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7928 [CRITICAL] CVE-2016-7928: tcpdump - The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.... The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)