CVE-2017-13028

Description

References

• debian.org/security/2017/dsa-3971 · Third Party Advisory
• securitytracker.com/id/1039307 · Third Party Advisory
• tcpdump.org/tcpdump-changes.txt · Vendor Advisory
• access.redhat.com/errata/RHEA-2018:0705 · Third Party Advisory
• the-tcpdump-group/tcpdump commit 29e5470 · Issue Tracking
• the-tcpdump-group/tcpdump commit 66e2296 · Issue Tracking
• security.gentoo.org/glsa/201709-23 · Third Party Advisory
• support.apple.com/HT208221 · Third Party Advisory

Weitere Schwachstellen in tcpdump

• CVE-2023-1801MITTEL 6.5The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.
• CVE-2019-15167KRITISCH 9.1The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability th…
• CVE-2020-8037HOCH 7.5The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
• CVE-2020-8036HOCH 7.5The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.
• CVE-2019-15166HOCH 7.5lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.