Debian Tcpdump vulnerabilities

CVE-2017-13689 [CRITICAL] CVE-2017-13689: tcpdump - The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.... The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13047 [CRITICAL] CVE-2017-13047: tcpdump - The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-iso... The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13026 [CRITICAL] CVE-2017-13026: tcpdump - The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-iso... The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions. Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13014 [CRITICAL] CVE-2017-13014: tcpdump - The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read i... The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions. Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2018-16229 [HIGH] CVE-2018-16229: tcpdump - The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:d... The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option(). Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)

CVE-2018-14880 [HIGH] CVE-2018-14880: tcpdump - The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.... The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr(). Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)

CVE-2018-14469 [HIGH] CVE-2018-14469: tcpdump - The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.... The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print(). Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)

CVE-2018-14468 [HIGH] CVE-2018-14468: tcpdump - The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:m... The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print(). Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)

CVE-2017-11542 [CRITICAL] CVE-2017-11542: tcpdump - tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in p... tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c. Scope: local bookworm: resolved (fixed in 4.9.1-3) bullseye: resolved (fixed in 4.9.1-3) forky: resolved (fixed in 4.9.1-3) sid: resolved (fixed in 4.9.1-3) trixie: resolved (fixed in 4.9.1-3)

CVE-2020-8037 [HIGH] CVE-2020-8037: tcpdump - The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amoun... The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory. Scope: local bookworm: resolved (fixed in 4.9.3-7) bullseye: resolved (fixed in 4.9.3-7) forky: resolved (fixed in 4.9.3-7) sid: resolved (fixed in 4.9.3-7) trixie: resolved (fixed in 4.9.3-7)

CVE-2017-13002 [CRITICAL] CVE-2017-13002: tcpdump - The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:a... The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12897 [CRITICAL] CVE-2017-12897: tcpdump - The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoc... The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12994 [CRITICAL] CVE-2017-12994: tcpdump - The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp... The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13012 [CRITICAL] CVE-2017-13012: tcpdump - The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:i... The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12999 [CRITICAL] CVE-2017-12999: tcpdump - The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns... The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13005 [CRITICAL] CVE-2017-13005: tcpdump - The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid... The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13016 [CRITICAL] CVE-2017-13016: tcpdump - The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-iso... The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12898 [CRITICAL] CVE-2017-12898: tcpdump - The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:int... The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13013 [CRITICAL] CVE-2017-13013: tcpdump - The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, se... The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions. Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13006 [CRITICAL] CVE-2017-13006: tcpdump - The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, ... The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions. Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)