Debian Tcpdump vulnerabilities

CVE-2017-13018 [CRITICAL] CVE-2017-13018: tcpdump - The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm... The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2019-15166 [LOW] CVE-2019-15166: tcpdump - lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certa... lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks. Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)

CVE-2017-13003 [CRITICAL] CVE-2017-13003: tcpdump - The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp... The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13007 [CRITICAL] CVE-2017-13007: tcpdump - The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-p... The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12998 [CRITICAL] CVE-2017-12998: tcpdump - The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns... The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12992 [CRITICAL] CVE-2017-12992: tcpdump - The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c... The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13001 [CRITICAL] CVE-2017-13001: tcpdump - The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs... The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12991 [CRITICAL] CVE-2017-12991: tcpdump - The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp... The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12901 [CRITICAL] CVE-2017-12901: tcpdump - The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c... The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12988 [CRITICAL] CVE-2017-12988: tcpdump - The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet... The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13015 [CRITICAL] CVE-2017-13015: tcpdump - The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap... The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12893 [CRITICAL] CVE-2017-12893: tcpdump - The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:... The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12996 [CRITICAL] CVE-2017-12996: tcpdump - The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:p... The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-12895 [CRITICAL] CVE-2017-12895: tcpdump - The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:i... The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2017-13017 [CRITICAL] CVE-2017-13017: tcpdump - The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.... The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print(). Scope: local bookworm: resolved (fixed in 4.9.2-1) bullseye: resolved (fixed in 4.9.2-1) forky: resolved (fixed in 4.9.2-1) sid: resolved (fixed in 4.9.2-1) trixie: resolved (fixed in 4.9.2-1)

CVE-2018-14881 [HIGH] CVE-2018-14881: tcpdump - The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp... The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART). Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)

CVE-2018-14465 [HIGH] CVE-2018-14465: tcpdump - The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:r... The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)

CVE-2018-14466 [HIGH] CVE-2018-14466: tcpdump - The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_ca... The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert(). Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)

CVE-2018-14464 [HIGH] CVE-2018-14464: tcpdump - The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp... The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs(). Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)

CVE-2018-14470 [HIGH] CVE-2018-14470: tcpdump - The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c... The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2(). Scope: local bookworm: resolved (fixed in 4.9.3-1) bullseye: resolved (fixed in 4.9.3-1) forky: resolved (fixed in 4.9.3-1) sid: resolved (fixed in 4.9.3-1) trixie: resolved (fixed in 4.9.3-1)