Debian Tcpdump vulnerabilities

CVE-2016-7934 [CRITICAL] CVE-2016-7934: tcpdump - The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtc... The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcp_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7923 [CRITICAL] CVE-2016-7923: tcpdump - The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_... The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7935 [CRITICAL] CVE-2016-7935: tcpdump - The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp_... The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7984 [CRITICAL] CVE-2016-7984: tcpdump - The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tf... The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftp_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7937 [CRITICAL] CVE-2016-7937: tcpdump - The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_... The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7930 [CRITICAL] CVE-2016-7930: tcpdump - The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c... The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7925 [CRITICAL] CVE-2016-7925: tcpdump - The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in prin... The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl_if_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7931 [CRITICAL] CVE-2016-7931: tcpdump - The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mp... The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7933 [CRITICAL] CVE-2016-7933: tcpdump - The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_... The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7936 [CRITICAL] CVE-2016-7936: tcpdump - The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_... The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7926 [CRITICAL] CVE-2016-7926: tcpdump - The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether... The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertype_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7922 [CRITICAL] CVE-2016-7922: tcpdump - The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_pri... The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2016-7985 [CRITICAL] CVE-2016-7985: tcpdump - The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm... The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calm_fast_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2015-2155 [HIGH] CVE-2015-2155: tcpdump - The force printer in tcpdump before 4.7.2 allows remote attackers to cause a den... The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. Scope: local bookworm: resolved (fixed in 4.6.2-4) bullseye: resolved (fixed in 4.6.2-4) forky: resolved (fixed in 4.6.2-4) sid: resolved (fixed in 4.6.2-4) trixie: resolved (fixed in 4.6.2-4)

CVE-2003-0108 [MEDIUM] CVE-2003-0108: tcpdump - isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a... isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop. Scope: local bookworm: resolved (fixed in 3.7.1-1.2) bullseye: resolved (fixed in 3.7.1-1.2) forky: resolved (fixed in 3.7.1-1.2) sid: resolved (fix

CVE-2017-13022 [CRITICAL] CVE-2017-13022: tcpdump - The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_pr... The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13037 [CRITICAL] CVE-2017-13037: tcpdump - The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_pr... The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13687 [CRITICAL] CVE-2017-13687: tcpdump - The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-ch... The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2016-7932 [CRITICAL] CVE-2016-7932: tcpdump - The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv... The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2017-13008 [CRITICAL] CVE-2017-13008: tcpdump - The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-8... The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)