Debian Tcpdump vulnerabilities

CVE-2017-13024 [CRITICAL] CVE-2017-13024: tcpdump - The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print... The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12985 [CRITICAL] CVE-2017-12985: tcpdump - The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip... The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13690 [CRITICAL] CVE-2017-13690: tcpdump - The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.... The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13025 [CRITICAL] CVE-2017-13025: tcpdump - The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print... The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13049 [CRITICAL] CVE-2017-13049: tcpdump - The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-r... The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13023 [CRITICAL] CVE-2017-13023: tcpdump - The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print... The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13039 [CRITICAL] CVE-2017-13039: tcpdump - The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp... The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13030 [CRITICAL] CVE-2017-13030: tcpdump - The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, se... The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions. Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13009 [CRITICAL] CVE-2017-13009: tcpdump - The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print... The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12986 [CRITICAL] CVE-2017-12986: tcpdump - The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in... The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13725 [CRITICAL] CVE-2017-13725: tcpdump - The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in... The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13031 [CRITICAL] CVE-2017-13031: tcpdump - The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-r... The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12993 [CRITICAL] CVE-2017-12993: tcpdump - The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in p... The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions. Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12900 [CRITICAL] CVE-2017-12900: tcpdump - Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read ... Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2019-15167 [HIGH] CVE-2019-15167: tcpdump - The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:v... The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463. Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)

CVE-2018-16451 [HIGH] CVE-2018-16451: tcpdump - The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:prin... The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN. Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)

CVE-2018-16300 [HIGH] CVE-2018-16300: tcpdump - The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:b... The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion. Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)

CVE-2017-13028 [CRITICAL] CVE-2017-13028: tcpdump - The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c... The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13010 [CRITICAL] CVE-2017-13010: tcpdump - The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l... The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13044 [CRITICAL] CVE-2017-13044: tcpdump - The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:d... The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)