Debian Tcpdump vulnerabilities

CVE-2017-5204 [CRITICAL] CVE-2017-5204: tcpdump - The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6... The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print(). Scope: local bookworm: resolved (fixed in 4.9.0-1) bullseye: resolved (fixed in 4.9.0-1) forky: resolved (fixed in 4.9.0-1) sid: resolved (fixed in 4.9.0-1) trixie: resolved (fixed in 4.9.0-1)

CVE-2017-13019 [CRITICAL] CVE-2017-13019: tcpdump - The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm... The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13032 [CRITICAL] CVE-2017-13032: tcpdump - The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius... The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12901 [CRITICAL] CVE-2017-12901: tcpdump - The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c... The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13037 [CRITICAL] CVE-2017-13037: tcpdump - The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_pr... The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13036 [CRITICAL] CVE-2017-13036: tcpdump - The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.... The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12995 [CRITICAL] CVE-2017-12995: tcpdump - The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug... The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13042 [CRITICAL] CVE-2017-13042: tcpdump - The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:d... The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12999 [CRITICAL] CVE-2017-12999: tcpdump - The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns... The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12985 [CRITICAL] CVE-2017-12985: tcpdump - The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip... The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13053 [CRITICAL] CVE-2017-13053: tcpdump - The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:dec... The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13005 [CRITICAL] CVE-2017-13005: tcpdump - The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid... The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13052 [CRITICAL] CVE-2017-13052: tcpdump - The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm... The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12990 [CRITICAL] CVE-2017-12990: tcpdump - The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bu... The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions. Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13688 [CRITICAL] CVE-2017-13688: tcpdump - The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:o... The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12988 [CRITICAL] CVE-2017-12988: tcpdump - The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet... The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13015 [CRITICAL] CVE-2017-13015: tcpdump - The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap... The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13034 [CRITICAL] CVE-2017-13034: tcpdump - The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm... The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13689 [CRITICAL] CVE-2017-13689: tcpdump - The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.... The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12893 [CRITICAL] CVE-2017-12893: tcpdump - The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:... The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)