{"id":"CVE-2017-13052","aliases":["DEBIAN-CVE-2017-13052","DLA-1097-1","DSA-3971-1","EUVD-2017-4570","GHSA-vq6g-wh5p-f2m9","MGASA-2017-0335","RHEA-2018:0705","SUSE-SU-2017:2854-1","UBUNTU-CVE-2017-13052","USN-3415-1","openSUSE-SU-2024:11425-1"],"status":"published","title":"The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().","description":"The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03428,"percentile":0.89007,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2017-09-10T12:36:09Z","modified":"2026-10-24T14:09:04Z","fixes":[{"ecosystem":"Debian:12","package":"tcpdump","fixed_in":["4.9.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tcpdump","fixed_in":["4.9.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tcpdump","fixed_in":["4.9.2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"tcpdump","fixed_in":["4.9.2-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"tcpdump","fixed_in":["4.9.2-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-1~deb7u1"}]}],"versions":["4.3.0-1","4.3.0-1+deb7u1","4.3.0-1+deb7u2","4.4.0-1","4.5.1-1","4.5.1-2","4.6.1-1","4.6.1-2","4.6.1-3","4.6.2-1","4.6.2-2","4.6.2-3","4.6.2-4","4.6.2-5","4.7.4-1","4.7.4-1~bpo70+1","4.7.4-1~bpo8+1","4.7.4-2","4.7.4-3","4.8.1-1","4.8.1-2","4.9.0-1","4.9.0-1~deb7u1","4.9.0-1~deb7u2","4.9.0-1~deb8u1","4.9.0-2","4.9.0-3","4.9.1-1","4.9.1-2","4.9.1-3"],"bundled":86},{"source":"osv","ecosystem":"Debian:8","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-1~deb8u1"}]}],"versions":["4.6.2-5","4.6.2-5+deb8u1","4.7.4-1","4.7.4-1~bpo70+1","4.7.4-1~bpo8+1","4.7.4-2","4.7.4-3","4.8.1-1","4.8.1-2","4.9.0-1","4.9.0-1~deb7u1","4.9.0-1~deb7u2","4.9.0-1~deb8u1","4.9.0-2","4.9.0-3","4.9.1-1","4.9.1-2","4.9.1-3","4.9.2-1~deb7u1"],"bundled":90},{"source":"osv","ecosystem":"Debian:9","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-1~deb9u1"}]}],"versions":["4.9.0-2","4.9.0-3","4.9.1-1","4.9.1-2","4.9.1-3","4.9.2-1~deb7u1","4.9.2-1~deb8u1"],"bundled":90},{"source":"osv","ecosystem":"Mageia:5","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-1.mga5"}]}],"bundled":89},{"source":"osv","ecosystem":"Mageia:6","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-1.mga6"}]}],"bundled":89},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.2-3.el7"}]}],"bundled":91},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"tcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.2-3.el7"}]}],"bundled":91},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.2-3.el7"}]}],"bundled":91},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"tcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.2-3.el7"}]}],"bundled":91},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.2-3.el7"}]}],"bundled":91},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"tcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.2-3.el7"}]}],"bundled":91},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.2-3.el7"}]}],"bundled":91},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"tcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14:4.9.2-3.el7"}]}],"bundled":91},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.5.1"}]}],"bundled":90},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.5.1"}]}],"bundled":90},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.5.1"}]}],"bundled":90},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.5.1"}]}],"bundled":90},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.5.1"}]}],"bundled":90},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.5.1"}]}],"bundled":90},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-14.5.1"}]}],"bundled":90},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-0ubuntu0.14.04.1"}]}],"versions":["4.4.0-1ubuntu1","4.5.1-2ubuntu1","4.5.1-2ubuntu1.1","4.5.1-2ubuntu1.2","4.9.0-1ubuntu1~ubuntu14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-0ubuntu0.16.04.1"}]}],"versions":["4.7.4-1ubuntu1","4.9.0-1ubuntu1~ubuntu16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-0ubuntu0.14.04.1"}]}],"versions":["4.4.0-1ubuntu1","4.5.1-2ubuntu1","4.5.1-2ubuntu1.1","4.5.1-2ubuntu1.2","4.9.0-1ubuntu1~ubuntu14.04.1"],"bundled":90},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-0ubuntu0.16.04.1"}]}],"versions":["4.7.4-1ubuntu1","4.9.0-1ubuntu1~ubuntu16.04.1"],"bundled":90},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.99.1-1.2"}]}],"bundled":161}],"products":[{"vendor":"tcpdump","product":"tcpdump"}],"references":[{"url":"https://security.gentoo.org/glsa/201709-23","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://support.apple.com/HT208221","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2017/dsa-3971","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://github.com/the-tcpdump-group/tcpdump/commit/5d340a5ca6e420a70297cdbdf777333f18bfdab7","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"http://www.securitytracker.com/id/1039307","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.tcpdump.org/tcpdump-changes.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHEA-2018:0705","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13052","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-vq6g-wh5p-f2m9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-13052","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0335.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21664","tags":["report"]},{"url":"https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1464390","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhea-2018_0705.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472878","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11108","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1475352","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11541","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1475355","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11542","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11542","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1475358","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11543","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1475359","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11544","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11544","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490539","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12893","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12894","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12894","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12895","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12895","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12895","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490543","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12896","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12896","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490545","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12897","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12897","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490546","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12898","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12898","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490547","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12899","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12899","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490548","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12900","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12900","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12901","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490549","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12901","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12901","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12902","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490550","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12902","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12902","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12985","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490551","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12985","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12985","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490552","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12986","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12986","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12987","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490553","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12987","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12987","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12988","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490554","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12988","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12988","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490555","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12989","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12989","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490556","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12990","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12990","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12991","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490557","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12991","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12991","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12992","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490558","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12992","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12992","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12993","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490559","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12993","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12993","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490560","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12994","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12994","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490561","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12995","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12995","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490562","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12996","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12996","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490564","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12997","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12997","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12998","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490565","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12998","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12998","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490566","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12999","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12999","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490567","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13000","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13000","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490568","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13001","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13001","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490569","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13002","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13002","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490570","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13003","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490571","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13004","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13004","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490572","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13005","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13005","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490573","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13006","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13006","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490574","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13007","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490575","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13008","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13008","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490576","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13009","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13009","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490577","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13010","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490578","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13011","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13012","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13012","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490580","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13013","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13013","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490581","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13014","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13014","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490582","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13015","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13015","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490583","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13016","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490584","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13017","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13017","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490585","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13018","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13018","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490586","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13019","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13019","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13020","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490587","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13020","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13020","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490588","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13021","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490589","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13022","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13022","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13023","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490591","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13024","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13024","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13025","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490592","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13025","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13025","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490593","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13026","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13026","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490594","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13027","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13027","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490595","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13028","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13028","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490596","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13029","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13029","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490597","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13030","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13030","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490598","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13031","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13031","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13032","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13032","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490600","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13033","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490601","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13034","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13034","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13035","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490602","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13035","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13035","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490603","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13036","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13036","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490604","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13037","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13037","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490605","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13038","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13038","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490606","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13039","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490607","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13040","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490608","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13041","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490609","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13042","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490610","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13043","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13043","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490611","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13044","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13044","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490612","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13045","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13045","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490613","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13046","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13046","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13047","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490614","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13047","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490615","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13048","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490616","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13049","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490617","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13050","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13050","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13051","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490618","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13051","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13051","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490619","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13052","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490620","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13053","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13054","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490621","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13054","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13054","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13055","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490622","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13055","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13055","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490623","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13687","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13687","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490624","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13688","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13688","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490625","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13689","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13689","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490626","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13690","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13690","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-13725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1490627","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13725","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13725","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172854-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1047873","tags":["report"]},{"url":"https://bugzilla.suse.com/1057247","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13725","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-13052","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3415-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3415-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-11108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11541","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11542","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11543","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12893","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12894","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12895","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12896","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12897","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12899","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12900","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12985","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12986","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12987","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12988","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12989","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12990","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12991","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12992","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12993","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12994","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12995","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12996","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12997","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12998","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12999","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13000","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13004","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13006","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13018","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13020","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13024","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13025","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13026","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13028","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13030","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13031","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13034","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13036","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13037","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13038","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13039","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13040","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13042","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13043","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13044","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13045","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13047","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13048","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13050","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13051","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13053","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13054","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13687","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13688","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13689","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13690","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13725","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1010220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8037","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-13052","description":"The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().","status":"published","published":"2017-09-14T06:00:00Z","modified":"2024-08-05T18:58:11.45Z","updated_at":"2026-11-02T14:33:17.903346Z"}],"euvd":[{"id":"EUVD-2017-4570","description":"The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().","status":"published","published":"2017-09-14T06:00:00Z","modified":"2024-08-05T18:58:11Z","updated_at":"2026-11-03T02:23:19.724201Z"}],"ghsa":[{"id":"GHSA-vq6g-wh5p-f2m9","title":"The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().","description":"The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().","status":"published","published":"2022-05-13T01:42:58Z","modified":"2023-02-02T05:00:49Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:51:03.373063Z"}],"nvd":[{"id":"CVE-2017-13052","description":"The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().","status":"published","published":"2017-09-14T06:29:03.153Z","modified":"2026-06-17T01:04:26.45Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:03:59.716532Z"}],"osv":[{"id":"CVE-2017-13052","description":"The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().","status":"published","published":"2017-09-14T06:29:03.153Z","modified":"2026-10-24T14:09:04.408820578Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:04.159616Z"},{"id":"DEBIAN-CVE-2017-13052","description":"The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().","status":"published","published":"2017-09-14T06:29:03.153Z","modified":"2026-09-01T20:03:43.041077522Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:28.50097Z"},{"id":"RHEA-2018:0705","title":"Red Hat Enhancement Advisory: tcpdump bug fix and enhancement update","status":"published","published":"2024-09-16T00:40:53Z","modified":"2026-06-26T10:36:12Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"UBUNTU-CVE-2017-13052","description":"The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().","status":"published","published":"2017-09-13T00:00:00Z","modified":"2026-02-04T02:38:02.996221Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:14.122973Z"},{"id":"DLA-1097-1","title":"tcpdump - security update","status":"published","published":"2017-09-15T00:00:00Z","modified":"2026-03-09T01:01:55.738106Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-3971-1","title":"tcpdump - security update","status":"published","published":"2017-09-13T00:00:00Z","modified":"2026-03-09T02:10:15.419269Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0335","title":"Updated tcpdump packages fix security vulnerabilities","description":"Summary for 4.9.2 tcpdump release\n\nDo not use getprotobynumber() for protocol name resolution.\nDo not do any protocol name resolution if -n is specified.\nImprove errors detection in the test scripts.\nFix a segfault with OpenSSL 1.1 and improve OpenSSL usage.\nClean up IS-IS printing.\n\nFix buffer overflow vulnerabilities: CVE-2017-11543 (SLIP),\nCVE-2017-13011 (bittok2str_internal)\n\nFix infinite loop vulnerabilities: CVE-2017-12989 (RESP), CVE-2017-12990\n(ISAKMP), CVE-2017-12995 (DNS), CVE-2017-12997 (LLDP).\n\nFix buffer over-read vulnerabilities: CVE-2017-11541 (safeputs),\nCVE-2017-11542 (PIMv1), CVE-2017-12893 (SMB/CIFS), CVE-2017-12894\n(lookup_bytestring), CVE-2017-12895 (ICMP), CVE-2017-12896 (ISAKMP),\nCVE-2017-12897 (ISO CLNS), CVE-2017-12898 (NFS), CVE-2017-12899 (DECnet),\nCVE-2017-12900 (tok2strbuf), CVE-2017-12901 (EIGRP), CVE-2017-12902\n(Zephyr), CVE-2017-12985 (IPv6), CVE-2017-12986 (IPv6 routing headers),\nCVE-2017-12987 (IEEE 802.11), CVE-2017-12988 (telnet), CVE-2017-12991\n(BGP), CVE-2017-12992 (RIPng), CVE-2017-12993 (Juniper), CVE-2017-11542\n(PIMv1), CVE-2017-11541 (safeputs), CVE-2017-12994 (BGP), CVE-2017-12996\n(PIMv2), CVE-2017-12998 (ISO IS-IS), CVE-2017-12999 (ISO IS-IS),\nCVE-2017-13000 (IEEE 802.15.4), CVE-2017-13001 (NFS), CVE-2017-13002\n(AODV), CVE-2017-13003 (LMP), CVE-2017-13004 (Juniper), CVE-2017-13005\n(NFS), CVE-2017-13006 (L2TP), CVE-2017-13007 (Apple PKTAP),\nCVE-2017-13008 (IEEE 802.11), CVE-2017-13009 (IPv6 mobility),\nCVE-2017-13010 (BEEP), CVE-2017-13012 (ICMP), CVE-2017-13013 (ARP),\nCVE-2017-13014 (White Board), CVE-2017-13015 (EAP), CVE-2017-11543\n(SLIP), CVE-2017-13016 (ISO ES-IS), CVE-2017-13017 (DHCPv6),\nCVE-2017-13018 (PGM), CVE-2017-13019 (PGM), CVE-2017-13020 (VTP),\nCVE-2017-13021 (ICMPv6), CVE-2017-13022 (IP), CVE-2017-13023\n(IPv6 mobility), CVE-2017-13024 (IPv6 mobility), CVE-2017-13025\n(IPv6 mobility), CVE-2017-13026 (ISO IS-IS), CVE-2017-13027 (LLDP),\nCVE-2017-13028 (BOOTP), CVE-2017-13029 (PPP), CVE-2017-13030 (PIM),\nCVE-2017-13031 (IPv6 fragmentation header), CVE-2017-13032 (RADIUS),\nCVE-2017-13033 (VTP), CVE-2017-13034 (PGM), CVE-2017-13035 (ISO IS-IS),\nCVE-2017-13036 (OSPFv3), CVE-2017-13037 (IP), CVE-2017-13038 (PPP),\nCVE-2017-13039 (ISAKMP), CVE-2017-13040 (MPTCP), CVE-2017-13041 (ICMPv6),\nCVE-2017-13042 (HNCP), CVE-2017-13043 (BGP), CVE-2017-13044 (HNCP),\nCVE-2017-13045 (VQP), CVE-2017-13046 (BGP), CVE-2017-13047 (ISO ES-IS),\nCVE-2017-13048 (RSVP), CVE-2017-13049 (Rx), CVE-2017-13050 (RPKI-Router),\nCVE-2017-13051 (RSVP), CVE-2017-13052 (CFM), CVE-2017-13053 (BGP),\nCVE-2017-13054 (LLDP), CVE-2017-13055 (ISO IS-IS), CVE-2017-13687\n(Cisco HDLC), CVE-2017-13688 (OLSR), CVE-2017-13689 (IKEv1),\nCVE-2017-13690 (IKEv2), CVE-2017-13725 (IPv6 routing headers)\n","status":"published","published":"2017-09-10T12:36:09Z","modified":"2026-04-16T06:23:05.551732499Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:11425-1","title":"tcpdump-4.99.1-1.2 on GA media","description":"These are all security issues fixed in the tcpdump-4.99.1-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:56:33.613635Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2017:2854-1","title":"Security update for tcpdump","description":"This update for tcpdump to version 4.9.2 fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2017-11108: Prevent remote attackers to cause DoS (heap-based buffer over-read and application crash) via crafted packet data. The crash occured in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol (bsc#1047873, bsc#1057247).\n- CVE-2017-11543: Prevent buffer overflow in the sliplink_print function in print-sl.c that allowed remote DoS (bsc#1057247).\n- CVE-2017-13011: Prevent buffer overflow in bittok2str_internal() that allowed remote DoS (bsc#1057247)\n- CVE-2017-12989: Prevent infinite loop in the RESP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12990: Prevent infinite loop in the ISAKMP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12995: Prevent infinite loop in the DNS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12997: Prevent infinite loop in the LLDP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-11541: Prevent heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c that allowed remote DoS (bsc#1057247).\n- CVE-2017-11542: Prevent heap-based buffer over-read in the pimv1_print function in print-pim.c that allowed remote DoS (bsc#1057247).\n- CVE-2017-12893: Prevent buffer over-read in the SMB/CIFS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12894: Prevent buffer over-read in several protocol parsers that allowed remote DoS (bsc#1057247)\n- CVE-2017-12895: Prevent buffer over-read in the ICMP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12896: Prevent buffer over-read in the ISAKMP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12897: Prevent buffer over-read in the ISO CLNS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12898: Prevent buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12899: Prevent buffer over-read in the DECnet parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12900: Prevent buffer over-read in the in several protocol parsers that allowed remote DoS (bsc#1057247)\n- CVE-2017-12901: Prevent buffer over-read in the EIGRP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12902: Prevent buffer over-read in the Zephyr parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12985: Prevent buffer over-read in the IPv6 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12986: Prevent buffer over-read in the IPv6 routing header parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12987: Prevent buffer over-read in the 802.11 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12988: Prevent buffer over-read in the telnet parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12991: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12992: Prevent buffer over-read in the RIPng parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12993: Prevent buffer over-read in the Juniper protocols parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12994: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12996: Prevent buffer over-read in the PIMv2 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12998: Prevent buffer over-read in the IS-IS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12999: Prevent buffer over-read in the IS-IS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13000: Prevent buffer over-read in the IEEE 802.15.4 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13001: Prevent buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13002: Prevent buffer over-read in the AODV parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13003: Prevent buffer over-read in the LMP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13004: Prevent buffer over-read in the Juniper protocols parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13005: Prevent buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13006: Prevent buffer over-read in the L2TP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13007: Prevent buffer over-read in the Apple PKTAP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13008: Prevent buffer over-read in the IEEE 802.11 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13009: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13010: Prevent buffer over-read in the BEEP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13012: Prevent buffer over-read in the ICMP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13013: Prevent buffer over-read in the ARP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13014: Prevent buffer over-read in the White Board protocol parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13015: Prevent buffer over-read in the EAP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13016: Prevent buffer over-read in the ISO ES-IS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13017: Prevent buffer over-read in the DHCPv6 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13018: Prevent buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13019: Prevent buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13020: Prevent buffer over-read in the VTP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13021: Prevent buffer over-read in the ICMPv6 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13022: Prevent buffer over-read in the IP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13023: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13024: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13025: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13026: Prevent buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13027: Prevent buffer over-read in the LLDP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13028: Prevent buffer over-read in the BOOTP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13029: Prevent buffer over-read in the PPP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13030: Prevent buffer over-read in the PIM parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13031: Prevent buffer over-read in the IPv6 fragmentation header parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13032: Prevent buffer over-read in the RADIUS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13033: Prevent buffer over-read in the VTP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13034: Prevent buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13035: Prevent buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13036: Prevent buffer over-read in the OSPFv3 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13037: Prevent buffer over-read in the IP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13038: Prevent buffer over-read in the PPP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13039: Prevent buffer over-read in the ISAKMP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13040: Prevent buffer over-read in the MPTCP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13041: Prevent buffer over-read in the ICMPv6 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13042: Prevent buffer over-read in the HNCP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13043: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13044: Prevent buffer over-read in the HNCP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13045: Prevent buffer over-read in the VQP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13046: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13047: Prevent buffer over-read in the ISO ES-IS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13048: Prevent buffer over-read in the RSVP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13049: Prevent buffer over-read in the Rx protocol parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13050: Prevent buffer over-read in the RPKI-Router parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13051: Prevent buffer over-read in the RSVP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13052: Prevent buffer over-read in the CFM parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13053: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13054: Prevent buffer over-read in the LLDP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13055: Prevent buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13687: Prevent buffer over-read in the Cisco HDLC parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13688: Prevent buffer over-read in the OLSR parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13689: Prevent buffer over-read in the IKEv1 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13690: Prevent buffer over-read in the IKEv2 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13725: Prevent buffer over-read in the IPv6 routing header parser that allowed remote DoS (bsc#1057247)\n- Prevent segmentation fault in ESP decoder with OpenSSL 1.1 (bsc#1057247)\n","status":"published","published":"2017-10-26T07:44:55Z","modified":"2026-02-04T04:25:20.888582Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"USN-3415-1","title":"tcpdump vulnerabilities","description":"Wilfried Kirsch discovered a buffer overflow in the SLIP decoder\nin tcpdump. A remote attacker could use this to cause a denial\nof service (application crash) or possibly execute arbitrary\ncode. (CVE-2017-11543)\n\nBhargava Shastry discovered a buffer overflow in the bitfield converter\nutility function bittok2str_internal() in tcpdump. A remote attacker\ncould use this to cause a denial of service (application crash)\nor possibly execute arbitrary code. (CVE-2017-13011)\n\nOtto Airamo and Antti Levomäki discovered logic errors in different\nprotocol parsers in tcpdump that could lead to an infinite loop. A\nremote attacker could use these to cause a denial of service\n(application hang). CVE-2017-12989, CVE-2017-12990, CVE-2017-12995,\nCVE-2017-12997)\n\nOtto Airamo, Brian Carpenter, Yannick Formaggio, Kamil Frankowicz,\nKatie Holly, Kim Gwan Yeong, Antti Levomäki, Henri Salo, and Bhargava\nShastry discovered out-of-bounds reads in muliptle protocol parsers\nin tcpdump.  A remote attacker could use these to cause a denial\nof service (application crash). (CVE-2017-11108, CVE-2017-11541,\nCVE-2017-11542, CVE-2017-12893, CVE-2017-12894, CVE-2017-12895,\nCVE-2017-12896, CVE-2017-12897, CVE-2017-12898, CVE-2017-12899,\nCVE-2017-12900, CVE-2017-12901, CVE-2017-12902, CVE-2017-12985,\nCVE-2017-12986, CVE-2017-12987, CVE-2017-12988, CVE-2017-12991,\nCVE-2017-12992, CVE-2017-12993, CVE-2017-12994, CVE-2017-12996,\nCVE-2017-12998, CVE-2017-12999, CVE-2017-13000, CVE-2017-13001,\nCVE-2017-13002, CVE-2017-13003, CVE-2017-13004, CVE-2017-13005,\nCVE-2017-13006, CVE-2017-13007, CVE-2017-13008, CVE-2017-13009,\nCVE-2017-13010, CVE-2017-13012, CVE-2017-13013, CVE-2017-13014,\nCVE-2017-13015, CVE-2017-13016, CVE-2017-13017, CVE-2017-13018,\nCVE-2017-13019, CVE-2017-13020, CVE-2017-13021, CVE-2017-13022,\nCVE-2017-13023, CVE-2017-13024, CVE-2017-13025, CVE-2017-13026,\nCVE-2017-13027, CVE-2017-13028, CVE-2017-13029, CVE-2017-13030,\nCVE-2017-13031, CVE-2017-13032, CVE-2017-13033, CVE-2017-13034,\nCVE-2017-13035, CVE-2017-13036, CVE-2017-13037, CVE-2017-13038,\nCVE-2017-13039, CVE-2017-13040, CVE-2017-13041, CVE-2017-13042,\nCVE-2017-13043, CVE-2017-13044, CVE-2017-13045, CVE-2017-13046,\nCVE-2017-13047, CVE-2017-13048, CVE-2017-13049, CVE-2017-13050,\nCVE-2017-13051, CVE-2017-13052, CVE-2017-13053, CVE-2017-13054,\nCVE-2017-13055, CVE-2017-13687, CVE-2017-13688, CVE-2017-13689,\nCVE-2017-13690, CVE-2017-13725)\n","status":"published","published":"2017-09-14T00:54:30Z","modified":"2026-02-10T04:41:12Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}