Tcpdump: Security Vulnerabilities
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().
CVSS Score
9.8
EPSS Score
0.006
Published
2017-09-14
The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().
CVSS Score
9.8
EPSS Score
0.01
Published
2017-09-14
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().
CVSS Score
9.8
EPSS Score
0.011
Published
2017-09-14
The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().
CVSS Score
9.8
EPSS Score
0.011
Published
2017-09-14
The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.
CVSS Score
9.8
EPSS Score
0.021
Published
2017-09-14
The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().
CVSS Score
9.8
EPSS Score
0.02
Published
2017-09-14
The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().
CVSS Score
9.8
EPSS Score
0.02
Published
2017-09-14
The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
CVSS Score
9.8
EPSS Score
0.021
Published
2017-09-14
The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().
CVSS Score
9.8
EPSS Score
0.011
Published
2017-09-14
The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().
CVSS Score
7.5
EPSS Score
0.011
Published
2017-09-14