Debian Tcpdump vulnerabilities

CVE-2017-12987 [CRITICAL] CVE-2017-12987: tcpdump - The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-8... The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13049 [CRITICAL] CVE-2017-13049: tcpdump - The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-r... The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12993 [CRITICAL] CVE-2017-12993: tcpdump - The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in p... The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions. Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-5205 [CRITICAL] CVE-2017-5205: tcpdump - The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.... The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2017-13027 [CRITICAL] CVE-2017-13027: tcpdump - The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:l... The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13054 [CRITICAL] CVE-2017-13054: tcpdump - The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:l... The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13035 [CRITICAL] CVE-2017-13035: tcpdump - The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-iso... The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13048 [CRITICAL] CVE-2017-13048: tcpdump - The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:r... The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-11541 [CRITICAL] CVE-2017-11541: tcpdump - tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in pr... tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c. Scope: local bookworm: resolved (fixed in 4.9.1-3) bullseye: resolved (fixed in 4.9.1-3) forky: resolved (fixed in 4.9.1-3) sid: resolved (fixed in 4.9.1-3) trixie: resolved (fixed in 4.9.1-3)

CVE-2017-13023 [CRITICAL] CVE-2017-13023: tcpdump - The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print... The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13001 [CRITICAL] CVE-2017-13001: tcpdump - The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs... The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13009 [CRITICAL] CVE-2017-13009: tcpdump - The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print... The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12991 [CRITICAL] CVE-2017-12991: tcpdump - The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp... The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-5485 [CRITICAL] CVE-2017-5485: tcpdump - The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.... The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2017-13011 [CRITICAL] CVE-2017-13011: tcpdump - Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow i... Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12986 [CRITICAL] CVE-2017-12986: tcpdump - The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in... The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-11542 [CRITICAL] CVE-2017-11542: tcpdump - tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in p... tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c. Scope: local bookworm: resolved (fixed in 4.9.1-3) bullseye: resolved (fixed in 4.9.1-3) forky: resolved (fixed in 4.9.1-3) sid: resolved (fixed in 4.9.1-3) trixie: resolved (fixed in 4.9.1-3)

CVE-2017-13055 [CRITICAL] CVE-2017-13055: tcpdump - The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-iso... The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13039 [CRITICAL] CVE-2017-13039: tcpdump - The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp... The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12899 [CRITICAL] CVE-2017-12899: tcpdump - The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet... The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)