Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,811

CVE-2017-12894

tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()

Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().

CVSS 3.1 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-12893

tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13689

tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser

The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13688

tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser

The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13055

tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13054

tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13053

tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13050

tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser

The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().

CVSS 3.1 · 9.8 Critical EPSS 4.6% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13048

tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13047

tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13045

tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser

The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().

CVSS 3.1 · 9.8 Critical EPSS 3.4% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13041

tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().

CVSS 3.1 · 9.8 Critical EPSS 4.6% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13040

tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser

The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.

CVSS 3.1 · 9.8 Critical EPSS 4.6% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-13038

tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser

The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().

CVSS 3.1 · 9.8 Critical EPSS 4.5% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2017-6519

avahi: Multicast DNS responds to unicast queries outside of local network

avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.

CVSS 3.1 · 9.1 Critical EPSS 3.2% KEV · Not listed
Vendors
Avahi Canonical Redhat
Products
Avahi Ubuntu Linux Enterprise Linux
CVE-2017-5130

chromium-browser: heap overflow in libxml2

An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.

CVSS 3.1 · 8.8 High EPSS 2.7% KEV · Not listed
Vendors
Debian Google Redhat and 1 more
Products
Debian Linux Chrome Rhel Extras and 1 more
CVE-2018-14881

tcpdump: Buffer over-read in bgp_capabilities_print() function in print-bgp.c

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).

CVSS 3.1 · 9.8 Critical EPSS 4.8% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 3 more
Products
Mac Os X Debian Linux Fedora and 3 more