CVE Vulnerability Catalog

The UDP parser in tcpdump before version 4.9.0 has a buffer overflow in the udp_print() function.

The RTP parser in tcpdump before version 4.9.0 has a buffer overflow in the rtp_print() function in print-udp.c.

The RTCP parser in tcpdump before version 4.9.0 has a buffer overflow in print-udp.c:rtcp_print().

The PPP parser in tcpdump before version 4.9.0 has a buffer overflow in the ppp_hdlc_if_print() function.

The PIM parser in tcpdump before version 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum().

The MPLS parser in tcpdump before version 4.9.0 has a buffer overflow in the mpls_print() function in print-mpls.c.

The LLC/SNAP parser in tcpdump before version 4.9.0 has a buffer overflow in the llc_print() function in print-llc.c.

The PPPoE ATM parser in tcpdump before version 4.9.0 has a buffer overflow in the juniper_parse_header() function.

The IPComp parser in tcpdump before version 4.9.0 has a buffer overflow in the ipcomp_print() function in print-ipcomp.c.

The IEEE 802.11 parser in tcpdump before version 4.9.0 has a buffer overflow in the ieee802_11_radio_print() function.

The Ethernet parser in tcpdump before version 4.9.0 has a buffer overflow in print-ether.c:ethertype_print().

The compressed SLIP parser in tcpdump before version 4.9.0 has a buffer overflow in the sl_if_print() function in print-sl.c.

The ATM parser in tcpdump before version 4.9.0 has a buffer overflow in the function print-atm.c:oam_print().

The ARP parser in tcpdump before version 4.9.0 has a buffer overflow in the arp_print() function in print-arp.c.

The AH parser in tcpdump before version 4.9.0 has a buffer overflow in the ah_print() function in print-ah.c.

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite allows unauthenticated attackers with network access via HTTP to compromise the system. Affected versions include 8.2, 8.3, 8.4, 15.1, 15.2, 16.1, and 16.2.

Vulnerability in the OJVM component of Oracle Database Server, affecting versions 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows a low privileged attacker to compromise OJVM with required human interaction from a person other than the attacker.

Vulnerability in the Java SE and Java SE Embedded component of Oracle Java SE that allows an unauthenticated attacker with network access to compromise these systems. Successful attacks require human interaction, and their impact may significantly affect additional products.

Vulnerability in the Java SE and Java SE Embedded components allows an unauthenticated attacker with network access to compromise these systems. It requires user interaction, making the attack easy to execute.

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters) allows an unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Affected versions are 8.5.2 and 8.5.3.