CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- tcpdumpThe EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().9.8 Critical
- tcpdumpThe White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c...9.8 Critical
- tcpdumpThe ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.9.8 Critical
- tcpdumpThe ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().9.8 Critical
- tcpdumpSeveral protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c...9.8 Critical
- tcpdumpThe BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().9.8 Critical
- tcpdumpThe IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c...9.8 Critical
- tcpdumpThe IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c...9.8 Critical
- tcpdumpThe Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c...9.8 Critical
- tcpdumpThe L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.9.8 Critical
- tcpdumpThe NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().9.8 Critical
- tcpdump, debian linux +1 moreThe Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c...9.8 Critical
- tcpdumpThe LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().9.8 Critical
- tcpdumpThe AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().9.8 Critical
- tcpdumpThe NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().9.8 Critical
- tcpdumpThe IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c...9.8 Critical
- tcpdumpThe IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().9.8 Critical
- tcpdumpThe IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c...9.8 Critical
- tcpdumpThe LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c...7.5 High
- tcpdumpThe PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().9.8 Critical
- tcpdumpThe DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain...7.5 High
- tcpdumpThe BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().9.8 Critical
- tcpdumpThe Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c,...9.8 Critical
- tcpdumpThe RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().9.8 Critical
- tcpdumpThe BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().9.8 Critical
- tcpdumpThe ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print...7.5 High
- tcpdumpThe RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c...7.5 High
- tcpdumpThe telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().9.8 Critical
- tcpdump, debian linux, redhat enterprise linux desktop +2 more +4 moreThe IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c...9.8 Critical
- tcpdumpThe IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c...9.8 Critical
- tcpdumpThe IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().9.8 Critical
- tcpdump, debian linux, redhat enterprise linux desktop +2 more +4 moreThe Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several...9.8 Critical
- tcpdumpThe EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().9.8 Critical
- tcpdumpSeveral protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c...9.8 Critical
- tcpdump, debian linux, redhat enterprise linux desktop +2 more +4 moreThe DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().9.8 Critical
- tcpdumpThe NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().9.8 Critical
- tcpdumpThe ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c...9.8 Critical
- tcpdump, debian linux, redhat enterprise linux desktop +2 more +4 moreThe ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c...9.8 Critical
- tcpdumpThe ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().9.8 Critical
- tcpdumpSeveral protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c...9.8 Critical
- tcpdumpThe SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().9.8 Critical
- genixcmsGeniXCMS denial of service (account blockage)5.3 Medium
- cyrus imapIn the mboxlist_do_find function in imap/mboxlist.c in Cyrus IMAP before 3.0.4, an off-by-one...9.1 Critical
- jasper project jasperThere is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13. It...7.5 High
- mongodbIn MongoDB libbson 1.7.0, the bson_iter_codewscope function in bson-iter.c miscalculates a...7.5 High
- libreoffice, libwpd +1 moreWP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1...7.5 High
- ffmpegThe av_color_primaries_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL...8.8 High
- vmware single sign-on for pivotal cloud foundryIn Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x...6.1 Medium
- vmware single sign-on for pivotal cloud foundryIn Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x...6.5 Medium
- azeotech daqfactoryAn Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to...5.3 Medium
- Show moreLoading…