CVE-2017-11108
HighSummary
tcpdump version 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.
Risk Assessment
Attackers can exploit this vulnerability to remotely crash tcpdump, potentially disrupting network traffic monitoring services.
Recommendation
It is recommended to update tcpdump to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Other vulnerabilities in tcpdump 4.9.0
See all- CVE-2015-3138High
The print-wb.c file in tcpdump before version 4.7.4 contains a vulnerability that allows remote attackers to cause a denial of service through a segmentation fault and process crash.
- CVE-2017-12989High
The RESP parser in tcpdump before version 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().
- CVE-2015-2155High
A vulnerability in tcpdump before version 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
- CVE-2015-0261High
Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.
- CVE-2017-13725Critical
The IPv6 routing header parser in tcpdump before version 4.9.2 has a buffer over-read in the rt6_print() function.
- CVE-2017-13690Critical
The IKEv2 parser in tcpdump before version 4.9.2 has a buffer over-read in print-isakmp.c in several functions.
- CVE-2017-13689Critical
The IKEv1 parser in tcpdump before version 4.9.2 has a buffer over-read in the ikev1_id_print() function.
- CVE-2017-13688Critical
The OLSR parser in tcpdump before version 4.9.2 has a buffer over-read in the olsr_print() function.
- CVE-2017-13687Critical
The HDLC parser in tcpdump before version 4.9.2 has a buffer over-read in the chdlc_print() function.
- CVE-2017-13055Critical
The ISO IS-IS parser in tcpdump before version 4.9.2 has a buffer over-read in the function isis_print_is_reach_subtlv().
Original NVD description (English source)
tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.