Debian: >> Debian Linux Security Vulnerabilities
The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().
CVSS Score
9.8
EPSS Score
0.036
Published
2017-09-14
The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().
CVSS Score
9.8
EPSS Score
0.035
Published
2017-09-14
The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().
CVSS Score
9.8
EPSS Score
0.033
Published
2017-09-14
The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().
CVSS Score
9.8
EPSS Score
0.033
Published
2017-09-14
The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().
CVSS Score
9.8
EPSS Score
0.033
Published
2017-09-14
The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.
CVSS Score
9.8
EPSS Score
0.035
Published
2017-09-14
The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
CVSS Score
9.8
EPSS Score
0.033
Published
2017-09-14
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability.
CVSS Score
8.8
EPSS Score
0.024
Published
2017-09-13
Open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter.
CVSS Score
6.1
EPSS Score
0.018
Published
2017-09-13
Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the "//" initial sequence.
CVSS Score
6.1
EPSS Score
0.018
Published
2017-09-13