
CVE-2017-13725 – Gentoo Linux Security Advisory 201709-23
https://notcve.org/view.php?id=CVE-2017-13725
09 Sep 2017 — The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print(). El analizador sintáctico de cabeceras de enrutamiento IPv6 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-rt6.c:rt6_print(). Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. Bhargava Shastry discovered a buffer overflow in... • http://www.debian.org/security/2017/dsa-3971 • CWE-125: Out-of-bounds Read •

CVE-2017-12898 – Gentoo Linux Security Advisory 201709-23
https://notcve.org/view.php?id=CVE-2017-12898
09 Sep 2017 — The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply(). El analizador sintáctico NFS en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-nfs.c:interp_reply(). Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. Bhargava Shastry discovered a buffer overflow in the bitfield converter utility function... • http://www.debian.org/security/2017/dsa-3971 • CWE-125: Out-of-bounds Read •

CVE-2017-12995 – Gentoo Linux Security Advisory 201709-23
https://notcve.org/view.php?id=CVE-2017-12995
09 Sep 2017 — The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print(). El analizador sintáctico DNS en tcpdump en versiones anteriores a la 4.9.2 podría introducir un bucle infinito por un fallo en print-domain.c:ns_print(). Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. Bhargava Shastry discovered a buffer overflow in the bitfield converter ... • http://www.debian.org/security/2017/dsa-3971 • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •

CVE-2017-13021 – Gentoo Linux Security Advisory 201709-23
https://notcve.org/view.php?id=CVE-2017-13021
09 Sep 2017 — The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print(). El analizador sintáctico ICMPv6 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-icmp6.c:icmp6_print(). Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. Bhargava Shastry discovered a buffer overflow in the bitfield converter utility ... • http://www.debian.org/security/2017/dsa-3971 • CWE-125: Out-of-bounds Read •

CVE-2017-13006 – Gentoo Linux Security Advisory 201709-23
https://notcve.org/view.php?id=CVE-2017-13006
09 Sep 2017 — The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions. El analizador sintáctico L2TP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-l2tp.c en varias funciones. Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. Bhargava Shastry discovered a buffer overflow in the bitfield converter uti... • http://www.debian.org/security/2017/dsa-3971 • CWE-125: Out-of-bounds Read •

CVE-2017-12893 – Gentoo Linux Security Advisory 201709-23
https://notcve.org/view.php?id=CVE-2017-12893
09 Sep 2017 — The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len(). El analizador sintáctico SMB/CIFS en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en smbutil.c:name_len(). Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. Bhargava Shastry discovered a buffer overflow in the bitfield converter utility function b... • http://www.debian.org/security/2017/dsa-3971 • CWE-125: Out-of-bounds Read •

CVE-2017-13000 – Gentoo Linux Security Advisory 201709-23
https://notcve.org/view.php?id=CVE-2017-13000
09 Sep 2017 — The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print(). El analizador sintáctico IEEE 802.15.4 en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-802_15_4.c:ieee802_15_4_if_print(). Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. Bhargava Shastry discovered a buffer ove... • http://www.debian.org/security/2017/dsa-3971 • CWE-125: Out-of-bounds Read •

CVE-2017-13003 – Gentoo Linux Security Advisory 201709-23
https://notcve.org/view.php?id=CVE-2017-13003
09 Sep 2017 — The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print(). El analizador sintáctico LMP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-lmp.c:lmp_print(). Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. Bhargava Shastry discovered a buffer overflow in the bitfield converter utility function bitto... • http://www.debian.org/security/2017/dsa-3971 • CWE-125: Out-of-bounds Read •

CVE-2017-12896 – Gentoo Linux Security Advisory 201709-23
https://notcve.org/view.php?id=CVE-2017-12896
09 Sep 2017 — The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print(). El analizador sintáctico ISAKMP en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-isakmp.c:isakmp_rfc3948_print(). Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. Bhargava Shastry discovered a buffer overflow in the bitfiel... • http://www.debian.org/security/2017/dsa-3971 • CWE-125: Out-of-bounds Read •

CVE-2017-13019 – Gentoo Linux Security Advisory 201709-23
https://notcve.org/view.php?id=CVE-2017-13019
09 Sep 2017 — The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). El analizador sintáctico PGM en tcpdump en versiones anteriores a la 4.9.2 tiene una vulnerabilidad de sobrelectura de búfer en print-pgm.c:pgm_print(). Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. Bhargava Shastry discovered a buffer overflow in the bitfield converter utility function bitto... • http://www.debian.org/security/2017/dsa-3971 • CWE-125: Out-of-bounds Read •