CVE-2007-1218

概要

参考情報

• cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-802_11.c
• cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-802_11.c
• docs.info.apple.com/article.html
• fedoranews.org/cms/node/2798
• fedoranews.org/cms/node/2799
• lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
• seclists.org/fulldisclosure/2007/Mar/0003.html
• secunia.com/advisories/24318 · Vendor Advisory
• secunia.com/advisories/24354 · Vendor Advisory
• secunia.com/advisories/24423 · Vendor Advisory
• secunia.com/advisories/24451 · Vendor Advisory
• secunia.com/advisories/24583 · Vendor Advisory
• secunia.com/advisories/24610 · Vendor Advisory
• secunia.com/advisories/27580

tcpdump のその他の脆弱性

• CVE-2023-1801中 6.5The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.
• CVE-2019-15167緊急 9.1The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability th…
• CVE-2020-8037高 7.5The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
• CVE-2020-8036高 7.5The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.
• CVE-2019-15166高 7.5lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.