Debian Tcpdump vulnerabilities

CVE-2017-12987 [CRITICAL] CVE-2017-12987: tcpdump - The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-8... The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13000 [CRITICAL] CVE-2017-13000: tcpdump - The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print... The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12990 [CRITICAL] CVE-2017-12990: tcpdump - The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bu... The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions. Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2018-16227 [HIGH] CVE-2018-16227: tcpdump - The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-8... The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield. Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)

CVE-2017-13050 [CRITICAL] CVE-2017-13050: tcpdump - The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-r... The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13040 [CRITICAL] CVE-2017-13040: tcpdump - The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c... The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions. Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13041 [CRITICAL] CVE-2017-13041: tcpdump - The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.... The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13019 [CRITICAL] CVE-2017-13019: tcpdump - The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm... The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13038 [CRITICAL] CVE-2017-13038: tcpdump - The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:han... The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2018-16452 [HIGH] CVE-2018-16452: tcpdump - The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fda... The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion. Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)

CVE-2017-13004 [CRITICAL] CVE-2017-13004: tcpdump - The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in p... The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12894 [CRITICAL] CVE-2017-12894: tcpdump - Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read ... Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12997 [CRITICAL] CVE-2017-12997: tcpdump - The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bu... The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12995 [CRITICAL] CVE-2017-12995: tcpdump - The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug... The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2015-0261 [HIGH] CVE-2015-0261: tcpdump - Integer signedness error in the mobility_opt_print function in the IPv6 mobility... Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value. Scope: local bookworm: resolved (fixed in 4.6.2-4) bullseye: resolved (fixed in 4.6.2-4) forky: resolved (fix

CVE-2018-14463 [HIGH] CVE-2018-14463: tcpdump - The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:v... The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167. Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)

CVE-2017-13033 [CRITICAL] CVE-2017-13033: tcpdump - The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp... The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-11541 [CRITICAL] CVE-2017-11541: tcpdump - tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in pr... tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c. Scope: local bookworm: resolved (fixed in 4.9.1-3) bullseye: resolved (fixed in 4.9.1-3) forky: resolved (fixed in 4.9.1-3) sid: resolved (fixed in 4.9.1-3) trixie: resolved (fixed in 4.9.1-3)

CVE-2017-13051 [CRITICAL] CVE-2017-13051: tcpdump - The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:r... The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12902 [CRITICAL] CVE-2017-12902: tcpdump - The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr... The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions. Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)