Debian Tcpdump vulnerabilities

CVE-2017-13031 [CRITICAL] CVE-2017-13031: tcpdump - The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-r... The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-5483 [CRITICAL] CVE-2017-5483: tcpdump - The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:as... The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2017-13046 [CRITICAL] CVE-2017-13046: tcpdump - The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp... The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13041 [CRITICAL] CVE-2017-13041: tcpdump - The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.... The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-5484 [CRITICAL] CVE-2017-5484: tcpdump - The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_... The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2017-13044 [CRITICAL] CVE-2017-13044: tcpdump - The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:d... The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13002 [CRITICAL] CVE-2017-13002: tcpdump - The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:a... The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-5486 [CRITICAL] CVE-2017-5486: tcpdump - The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isocl... The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2017-12896 [CRITICAL] CVE-2017-12896: tcpdump - The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp... The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12998 [CRITICAL] CVE-2017-12998: tcpdump - The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns... The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13690 [CRITICAL] CVE-2017-13690: tcpdump - The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.... The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13025 [CRITICAL] CVE-2017-13025: tcpdump - The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print... The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12897 [CRITICAL] CVE-2017-12897: tcpdump - The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoc... The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12994 [CRITICAL] CVE-2017-12994: tcpdump - The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp... The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12997 [CRITICAL] CVE-2017-12997: tcpdump - The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bu... The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12992 [CRITICAL] CVE-2017-12992: tcpdump - The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c... The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13012 [CRITICAL] CVE-2017-13012: tcpdump - The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:i... The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13022 [CRITICAL] CVE-2017-13022: tcpdump - The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_pr... The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13043 [CRITICAL] CVE-2017-13043: tcpdump - The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:dec... The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-5341 [CRITICAL] CVE-2017-5341: tcpdump - The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_... The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)