csaf_suse - suse-su-2017:2854-1

Vulnerability from csaf_suse

Published

2017-10-26 07:44

Modified

2017-10-26 07:44

Summary

Security update for tcpdump

Notes

Title of the patch

Security update for tcpdump

Description of the patch

This update for tcpdump to version 4.9.2 fixes several issues. These security issues were fixed: - CVE-2017-11108: Prevent remote attackers to cause DoS (heap-based buffer over-read and application crash) via crafted packet data. The crash occured in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol (bsc#1047873, bsc#1057247). - CVE-2017-11543: Prevent buffer overflow in the sliplink_print function in print-sl.c that allowed remote DoS (bsc#1057247). - CVE-2017-13011: Prevent buffer overflow in bittok2str_internal() that allowed remote DoS (bsc#1057247) - CVE-2017-12989: Prevent infinite loop in the RESP parser that allowed remote DoS (bsc#1057247) - CVE-2017-12990: Prevent infinite loop in the ISAKMP parser that allowed remote DoS (bsc#1057247) - CVE-2017-12995: Prevent infinite loop in the DNS parser that allowed remote DoS (bsc#1057247) - CVE-2017-12997: Prevent infinite loop in the LLDP parser that allowed remote DoS (bsc#1057247) - CVE-2017-11541: Prevent heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c that allowed remote DoS (bsc#1057247). - CVE-2017-11542: Prevent heap-based buffer over-read in the pimv1_print function in print-pim.c that allowed remote DoS (bsc#1057247). - CVE-2017-12893: Prevent buffer over-read in the SMB/CIFS parser that allowed remote DoS (bsc#1057247) - CVE-2017-12894: Prevent buffer over-read in several protocol parsers that allowed remote DoS (bsc#1057247) - CVE-2017-12895: Prevent buffer over-read in the ICMP parser that allowed remote DoS (bsc#1057247) - CVE-2017-12896: Prevent buffer over-read in the ISAKMP parser that allowed remote DoS (bsc#1057247) - CVE-2017-12897: Prevent buffer over-read in the ISO CLNS parser that allowed remote DoS (bsc#1057247) - CVE-2017-12898: Prevent buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247) - CVE-2017-12899: Prevent buffer over-read in the DECnet parser that allowed remote DoS (bsc#1057247) - CVE-2017-12900: Prevent buffer over-read in the in several protocol parsers that allowed remote DoS (bsc#1057247) - CVE-2017-12901: Prevent buffer over-read in the EIGRP parser that allowed remote DoS (bsc#1057247) - CVE-2017-12902: Prevent buffer over-read in the Zephyr parser that allowed remote DoS (bsc#1057247) - CVE-2017-12985: Prevent buffer over-read in the IPv6 parser that allowed remote DoS (bsc#1057247) - CVE-2017-12986: Prevent buffer over-read in the IPv6 routing header parser that allowed remote DoS (bsc#1057247) - CVE-2017-12987: Prevent buffer over-read in the 802.11 parser that allowed remote DoS (bsc#1057247) - CVE-2017-12988: Prevent buffer over-read in the telnet parser that allowed remote DoS (bsc#1057247) - CVE-2017-12991: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247) - CVE-2017-12992: Prevent buffer over-read in the RIPng parser that allowed remote DoS (bsc#1057247) - CVE-2017-12993: Prevent buffer over-read in the Juniper protocols parser that allowed remote DoS (bsc#1057247) - CVE-2017-12994: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247) - CVE-2017-12996: Prevent buffer over-read in the PIMv2 parser that allowed remote DoS (bsc#1057247) - CVE-2017-12998: Prevent buffer over-read in the IS-IS parser that allowed remote DoS (bsc#1057247) - CVE-2017-12999: Prevent buffer over-read in the IS-IS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13000: Prevent buffer over-read in the IEEE 802.15.4 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13001: Prevent buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13002: Prevent buffer over-read in the AODV parser that allowed remote DoS (bsc#1057247) - CVE-2017-13003: Prevent buffer over-read in the LMP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13004: Prevent buffer over-read in the Juniper protocols parser that allowed remote DoS (bsc#1057247) - CVE-2017-13005: Prevent buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13006: Prevent buffer over-read in the L2TP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13007: Prevent buffer over-read in the Apple PKTAP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13008: Prevent buffer over-read in the IEEE 802.11 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13009: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247) - CVE-2017-13010: Prevent buffer over-read in the BEEP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13012: Prevent buffer over-read in the ICMP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13013: Prevent buffer over-read in the ARP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13014: Prevent buffer over-read in the White Board protocol parser that allowed remote DoS (bsc#1057247) - CVE-2017-13015: Prevent buffer over-read in the EAP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13016: Prevent buffer over-read in the ISO ES-IS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13017: Prevent buffer over-read in the DHCPv6 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13018: Prevent buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247) - CVE-2017-13019: Prevent buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247) - CVE-2017-13020: Prevent buffer over-read in the VTP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13021: Prevent buffer over-read in the ICMPv6 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13022: Prevent buffer over-read in the IP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13023: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247) - CVE-2017-13024: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247) - CVE-2017-13025: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247) - CVE-2017-13026: Prevent buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13027: Prevent buffer over-read in the LLDP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13028: Prevent buffer over-read in the BOOTP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13029: Prevent buffer over-read in the PPP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13030: Prevent buffer over-read in the PIM parser that allowed remote DoS (bsc#1057247) - CVE-2017-13031: Prevent buffer over-read in the IPv6 fragmentation header parser that allowed remote DoS (bsc#1057247) - CVE-2017-13032: Prevent buffer over-read in the RADIUS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13033: Prevent buffer over-read in the VTP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13034: Prevent buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247) - CVE-2017-13035: Prevent buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13036: Prevent buffer over-read in the OSPFv3 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13037: Prevent buffer over-read in the IP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13038: Prevent buffer over-read in the PPP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13039: Prevent buffer over-read in the ISAKMP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13040: Prevent buffer over-read in the MPTCP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13041: Prevent buffer over-read in the ICMPv6 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13042: Prevent buffer over-read in the HNCP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13043: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13044: Prevent buffer over-read in the HNCP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13045: Prevent buffer over-read in the VQP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13046: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13047: Prevent buffer over-read in the ISO ES-IS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13048: Prevent buffer over-read in the RSVP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13049: Prevent buffer over-read in the Rx protocol parser that allowed remote DoS (bsc#1057247) - CVE-2017-13050: Prevent buffer over-read in the RPKI-Router parser that allowed remote DoS (bsc#1057247) - CVE-2017-13051: Prevent buffer over-read in the RSVP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13052: Prevent buffer over-read in the CFM parser that allowed remote DoS (bsc#1057247) - CVE-2017-13053: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13054: Prevent buffer over-read in the LLDP parser that allowed remote DoS (bsc#1057247) - CVE-2017-13055: Prevent buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247) - CVE-2017-13687: Prevent buffer over-read in the Cisco HDLC parser that allowed remote DoS (bsc#1057247) - CVE-2017-13688: Prevent buffer over-read in the OLSR parser that allowed remote DoS (bsc#1057247) - CVE-2017-13689: Prevent buffer over-read in the IKEv1 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13690: Prevent buffer over-read in the IKEv2 parser that allowed remote DoS (bsc#1057247) - CVE-2017-13725: Prevent buffer over-read in the IPv6 routing header parser that allowed remote DoS (bsc#1057247) - Prevent segmentation fault in ESP decoder with OpenSSL 1.1 (bsc#1057247)

Patchnames

SUSE-SLE-DESKTOP-12-SP2-2017-1776,SUSE-SLE-DESKTOP-12-SP3-2017-1776,SUSE-SLE-RPI-12-SP2-2017-1776,SUSE-SLE-SERVER-12-SP2-2017-1776,SUSE-SLE-SERVER-12-SP3-2017-1776

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for tcpdump",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for tcpdump to version 4.9.2 fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2017-11108: Prevent remote attackers to cause DoS (heap-based buffer over-read and application crash) via crafted packet data. The crash occured in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol (bsc#1047873, bsc#1057247).\n- CVE-2017-11543: Prevent buffer overflow in the sliplink_print function in print-sl.c that allowed remote DoS (bsc#1057247).\n- CVE-2017-13011: Prevent buffer overflow in bittok2str_internal() that allowed remote DoS (bsc#1057247)\n- CVE-2017-12989: Prevent infinite loop in the RESP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12990: Prevent infinite loop in the ISAKMP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12995: Prevent infinite loop in the DNS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12997: Prevent infinite loop in the LLDP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-11541: Prevent heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c that allowed remote DoS (bsc#1057247).\n- CVE-2017-11542: Prevent heap-based buffer over-read in the pimv1_print function in print-pim.c that allowed remote DoS (bsc#1057247).\n- CVE-2017-12893: Prevent buffer over-read in the SMB/CIFS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12894: Prevent buffer over-read in several protocol parsers that allowed remote DoS (bsc#1057247)\n- CVE-2017-12895: Prevent buffer over-read in the ICMP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12896: Prevent buffer over-read in the ISAKMP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12897: Prevent buffer over-read in the ISO CLNS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12898: Prevent buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12899: Prevent buffer over-read in the DECnet parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12900: Prevent buffer over-read in the in several protocol parsers that allowed remote DoS (bsc#1057247)\n- CVE-2017-12901: Prevent buffer over-read in the EIGRP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12902: Prevent buffer over-read in the Zephyr parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12985: Prevent buffer over-read in the IPv6 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12986: Prevent buffer over-read in the IPv6 routing header parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12987: Prevent buffer over-read in the 802.11 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12988: Prevent buffer over-read in the telnet parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12991: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12992: Prevent buffer over-read in the RIPng parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12993: Prevent buffer over-read in the Juniper protocols parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12994: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12996: Prevent buffer over-read in the PIMv2 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12998: Prevent buffer over-read in the IS-IS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-12999: Prevent buffer over-read in the IS-IS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13000: Prevent buffer over-read in the IEEE 802.15.4 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13001: Prevent buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13002: Prevent buffer over-read in the AODV parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13003: Prevent buffer over-read in the LMP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13004: Prevent buffer over-read in the Juniper protocols parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13005: Prevent buffer over-read in the NFS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13006: Prevent buffer over-read in the L2TP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13007: Prevent buffer over-read in the Apple PKTAP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13008: Prevent buffer over-read in the IEEE 802.11 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13009: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13010: Prevent buffer over-read in the BEEP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13012: Prevent buffer over-read in the ICMP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13013: Prevent buffer over-read in the ARP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13014: Prevent buffer over-read in the White Board protocol parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13015: Prevent buffer over-read in the EAP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13016: Prevent buffer over-read in the ISO ES-IS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13017: Prevent buffer over-read in the DHCPv6 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13018: Prevent buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13019: Prevent buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13020: Prevent buffer over-read in the VTP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13021: Prevent buffer over-read in the ICMPv6 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13022: Prevent buffer over-read in the IP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13023: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13024: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13025: Prevent buffer over-read in the IPv6 mobility parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13026: Prevent buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13027: Prevent buffer over-read in the LLDP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13028: Prevent buffer over-read in the BOOTP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13029: Prevent buffer over-read in the PPP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13030: Prevent buffer over-read in the PIM parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13031: Prevent buffer over-read in the IPv6 fragmentation header parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13032: Prevent buffer over-read in the RADIUS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13033: Prevent buffer over-read in the VTP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13034: Prevent buffer over-read in the PGM parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13035: Prevent buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13036: Prevent buffer over-read in the OSPFv3 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13037: Prevent buffer over-read in the IP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13038: Prevent buffer over-read in the PPP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13039: Prevent buffer over-read in the ISAKMP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13040: Prevent buffer over-read in the MPTCP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13041: Prevent buffer over-read in the ICMPv6 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13042: Prevent buffer over-read in the HNCP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13043: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13044: Prevent buffer over-read in the HNCP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13045: Prevent buffer over-read in the VQP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13046: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13047: Prevent buffer over-read in the ISO ES-IS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13048: Prevent buffer over-read in the RSVP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13049: Prevent buffer over-read in the Rx protocol parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13050: Prevent buffer over-read in the RPKI-Router parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13051: Prevent buffer over-read in the RSVP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13052: Prevent buffer over-read in the CFM parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13053: Prevent buffer over-read in the BGP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13054: Prevent buffer over-read in the LLDP parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13055: Prevent buffer over-read in the ISO IS-IS parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13687: Prevent buffer over-read in the Cisco HDLC parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13688: Prevent buffer over-read in the OLSR parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13689: Prevent buffer over-read in the IKEv1 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13690: Prevent buffer over-read in the IKEv2 parser that allowed remote DoS (bsc#1057247)\n- CVE-2017-13725: Prevent buffer over-read in the IPv6 routing header parser that allowed remote DoS (bsc#1057247)\n- Prevent segmentation fault in ESP decoder with OpenSSL 1.1 (bsc#1057247)\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-SLE-DESKTOP-12-SP2-2017-1776,SUSE-SLE-DESKTOP-12-SP3-2017-1776,SUSE-SLE-RPI-12-SP2-2017-1776,SUSE-SLE-SERVER-12-SP2-2017-1776,SUSE-SLE-SERVER-12-SP3-2017-1776",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_2854-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2017:2854-1",
            url: "https://www.suse.com/support/update/announcement/2017/suse-su-20172854-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2017:2854-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2017-October/003355.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1047873",
            url: "https://bugzilla.suse.com/1047873",
         },
         {
            category: "self",
            summary: "SUSE Bug 1057247",
            url: "https://bugzilla.suse.com/1057247",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-11108 page",
            url: "https://www.suse.com/security/cve/CVE-2017-11108/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-11541 page",
            url: "https://www.suse.com/security/cve/CVE-2017-11541/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-11542 page",
            url: "https://www.suse.com/security/cve/CVE-2017-11542/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-11543 page",
            url: "https://www.suse.com/security/cve/CVE-2017-11543/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12893 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12893/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12894 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12894/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12895 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12895/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12896 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12896/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12897 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12897/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12898 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12898/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12899 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12899/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12900 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12900/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12901 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12901/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12902 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12902/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12985 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12985/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12986 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12986/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12987 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12987/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12988 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12988/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12989 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12989/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12990 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12990/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12991 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12991/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12992 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12992/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12993 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12993/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12994 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12994/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12995 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12995/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12996 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12996/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12997 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12997/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12998 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12998/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-12999 page",
            url: "https://www.suse.com/security/cve/CVE-2017-12999/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13000 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13000/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13001 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13001/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13002 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13002/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13003 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13003/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13004 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13004/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13005 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13005/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13006 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13006/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13007 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13007/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13008 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13008/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13009 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13009/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13010 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13010/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13011 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13011/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13012 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13012/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13013 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13013/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13014 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13014/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13015 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13015/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13016 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13016/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13017 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13017/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13018 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13018/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13019 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13019/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13020 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13020/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13021 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13021/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13022 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13022/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13023 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13023/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13024 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13024/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13025 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13025/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13026 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13026/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13027 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13027/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13028 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13028/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13029 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13029/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13030 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13030/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13031 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13031/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13032 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13032/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13033 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13033/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13034 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13034/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13035 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13035/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13036 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13036/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13037 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13037/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13038 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13038/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13039 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13039/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13040 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13040/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13041 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13041/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13042 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13042/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13043 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13043/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13044 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13044/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13045 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13045/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13046 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13046/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13047 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13047/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13048 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13048/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13049 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13049/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13050 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13050/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13051 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13051/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13052 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13052/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13053 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13053/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13054 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13054/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13055 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13055/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13687 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13687/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13688 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13688/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13689 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13689/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13690 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13690/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-13725 page",
            url: "https://www.suse.com/security/cve/CVE-2017-13725/",
         },
      ],
      title: "Security update for tcpdump",
      tracking: {
         current_release_date: "2017-10-26T07:44:55Z",
         generator: {
            date: "2017-10-26T07:44:55Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2017:2854-1",
         initial_release_date: "2017-10-26T07:44:55Z",
         revision_history: [
            {
               date: "2017-10-26T07:44:55Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "tcpdump-4.9.2-14.5.1.aarch64",
                        product: {
                           name: "tcpdump-4.9.2-14.5.1.aarch64",
                           product_id: "tcpdump-4.9.2-14.5.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "tcpdump-4.9.2-14.5.1.ppc64le",
                        product: {
                           name: "tcpdump-4.9.2-14.5.1.ppc64le",
                           product_id: "tcpdump-4.9.2-14.5.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "tcpdump-4.9.2-14.5.1.s390x",
                        product: {
                           name: "tcpdump-4.9.2-14.5.1.s390x",
                           product_id: "tcpdump-4.9.2-14.5.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "tcpdump-4.9.2-14.5.1.x86_64",
                        product: {
                           name: "tcpdump-4.9.2-14.5.1.x86_64",
                           product_id: "tcpdump-4.9.2-14.5.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Desktop 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Desktop 12 SP2",
                           product_id: "SUSE Linux Enterprise Desktop 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sled:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Desktop 12 SP3",
                        product: {
                           name: "SUSE Linux Enterprise Desktop 12 SP3",
                           product_id: "SUSE Linux Enterprise Desktop 12 SP3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sled:12:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                           product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP2",
                           product_id: "SUSE Linux Enterprise Server 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP3",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP3",
                           product_id: "SUSE Linux Enterprise Server 12 SP3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp3",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
               product_id: "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
               product_id: "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
               product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
               product_id: "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
               product_id: "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
               product_id: "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
               product_id: "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
               product_id: "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "tcpdump-4.9.2-14.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            },
            product_reference: "tcpdump-4.9.2-14.5.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2017-11108",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-11108",
            },
         ],
         notes: [
            {
               category: "general",
               text: "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-11108",
               url: "https://www.suse.com/security/cve/CVE-2017-11108",
            },
            {
               category: "external",
               summary: "SUSE Bug 1047873 for CVE-2017-11108",
               url: "https://bugzilla.suse.com/1047873",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-11108",
               url: "https://bugzilla.suse.com/1057247",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123142 for CVE-2017-11108",
               url: "https://bugzilla.suse.com/1123142",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-11108",
      },
      {
         cve: "CVE-2017-11541",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-11541",
            },
         ],
         notes: [
            {
               category: "general",
               text: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-11541",
               url: "https://www.suse.com/security/cve/CVE-2017-11541",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-11541",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-11541",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-11541",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-11541",
               url: "https://bugzilla.suse.com/1057247",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123142 for CVE-2017-11541",
               url: "https://bugzilla.suse.com/1123142",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-11541",
      },
      {
         cve: "CVE-2017-11542",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-11542",
            },
         ],
         notes: [
            {
               category: "general",
               text: "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-11542",
               url: "https://www.suse.com/security/cve/CVE-2017-11542",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-11542",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-11542",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-11542",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-11542",
               url: "https://bugzilla.suse.com/1057247",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123142 for CVE-2017-11542",
               url: "https://bugzilla.suse.com/1123142",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "moderate",
            },
         ],
         title: "CVE-2017-11542",
      },
      {
         cve: "CVE-2017-11543",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-11543",
            },
         ],
         notes: [
            {
               category: "general",
               text: "tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-11543",
               url: "https://www.suse.com/security/cve/CVE-2017-11543",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-11543",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-11543",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-11543",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-11543",
               url: "https://bugzilla.suse.com/1057247",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123142 for CVE-2017-11543",
               url: "https://bugzilla.suse.com/1123142",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "important",
            },
         ],
         title: "CVE-2017-11543",
      },
      {
         cve: "CVE-2017-12893",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12893",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12893",
               url: "https://www.suse.com/security/cve/CVE-2017-12893",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12893",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12893",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12893",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12893",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12893",
      },
      {
         cve: "CVE-2017-12894",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12894",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12894",
               url: "https://www.suse.com/security/cve/CVE-2017-12894",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12894",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12894",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12894",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12894",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12894",
      },
      {
         cve: "CVE-2017-12895",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12895",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12895",
               url: "https://www.suse.com/security/cve/CVE-2017-12895",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12895",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12895",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12895",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12895",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12895",
      },
      {
         cve: "CVE-2017-12896",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12896",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12896",
               url: "https://www.suse.com/security/cve/CVE-2017-12896",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12896",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12896",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12896",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12896",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12896",
      },
      {
         cve: "CVE-2017-12897",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12897",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12897",
               url: "https://www.suse.com/security/cve/CVE-2017-12897",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12897",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12897",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12897",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12897",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12897",
      },
      {
         cve: "CVE-2017-12898",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12898",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12898",
               url: "https://www.suse.com/security/cve/CVE-2017-12898",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12898",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12898",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12898",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12898",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12898",
      },
      {
         cve: "CVE-2017-12899",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12899",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12899",
               url: "https://www.suse.com/security/cve/CVE-2017-12899",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12899",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12899",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12899",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12899",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12899",
      },
      {
         cve: "CVE-2017-12900",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12900",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12900",
               url: "https://www.suse.com/security/cve/CVE-2017-12900",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12900",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12900",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12900",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12900",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12900",
      },
      {
         cve: "CVE-2017-12901",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12901",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12901",
               url: "https://www.suse.com/security/cve/CVE-2017-12901",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12901",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12901",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12901",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12901",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12901",
      },
      {
         cve: "CVE-2017-12902",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12902",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12902",
               url: "https://www.suse.com/security/cve/CVE-2017-12902",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12902",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12902",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12902",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12902",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12902",
      },
      {
         cve: "CVE-2017-12985",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12985",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12985",
               url: "https://www.suse.com/security/cve/CVE-2017-12985",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12985",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12985",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12985",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12985",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12985",
      },
      {
         cve: "CVE-2017-12986",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12986",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12986",
               url: "https://www.suse.com/security/cve/CVE-2017-12986",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12986",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12986",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12986",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12986",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12986",
      },
      {
         cve: "CVE-2017-12987",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12987",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12987",
               url: "https://www.suse.com/security/cve/CVE-2017-12987",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12987",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12987",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12987",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12987",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12987",
      },
      {
         cve: "CVE-2017-12988",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12988",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12988",
               url: "https://www.suse.com/security/cve/CVE-2017-12988",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12988",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12988",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12988",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12988",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12988",
      },
      {
         cve: "CVE-2017-12989",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12989",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12989",
               url: "https://www.suse.com/security/cve/CVE-2017-12989",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12989",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12989",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12989",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12989",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12989",
      },
      {
         cve: "CVE-2017-12990",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12990",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12990",
               url: "https://www.suse.com/security/cve/CVE-2017-12990",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12990",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12990",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12990",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12990",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12990",
      },
      {
         cve: "CVE-2017-12991",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12991",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12991",
               url: "https://www.suse.com/security/cve/CVE-2017-12991",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12991",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12991",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12991",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12991",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12991",
      },
      {
         cve: "CVE-2017-12992",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12992",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12992",
               url: "https://www.suse.com/security/cve/CVE-2017-12992",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12992",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12992",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12992",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12992",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12992",
      },
      {
         cve: "CVE-2017-12993",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12993",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12993",
               url: "https://www.suse.com/security/cve/CVE-2017-12993",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12993",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12993",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12993",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12993",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12993",
      },
      {
         cve: "CVE-2017-12994",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12994",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12994",
               url: "https://www.suse.com/security/cve/CVE-2017-12994",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12994",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12994",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12994",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12994",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12994",
      },
      {
         cve: "CVE-2017-12995",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12995",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12995",
               url: "https://www.suse.com/security/cve/CVE-2017-12995",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12995",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12995",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12995",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12995",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12995",
      },
      {
         cve: "CVE-2017-12996",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12996",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12996",
               url: "https://www.suse.com/security/cve/CVE-2017-12996",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12996",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12996",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12996",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12996",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12996",
      },
      {
         cve: "CVE-2017-12997",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12997",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12997",
               url: "https://www.suse.com/security/cve/CVE-2017-12997",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12997",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12997",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12997",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12997",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12997",
      },
      {
         cve: "CVE-2017-12998",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12998",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12998",
               url: "https://www.suse.com/security/cve/CVE-2017-12998",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12998",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12998",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12998",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12998",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12998",
      },
      {
         cve: "CVE-2017-12999",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-12999",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-12999",
               url: "https://www.suse.com/security/cve/CVE-2017-12999",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-12999",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-12999",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-12999",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-12999",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-12999",
      },
      {
         cve: "CVE-2017-13000",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13000",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13000",
               url: "https://www.suse.com/security/cve/CVE-2017-13000",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13000",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13000",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13000",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13000",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13000",
      },
      {
         cve: "CVE-2017-13001",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13001",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13001",
               url: "https://www.suse.com/security/cve/CVE-2017-13001",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13001",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13001",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13001",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13001",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13001",
      },
      {
         cve: "CVE-2017-13002",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13002",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13002",
               url: "https://www.suse.com/security/cve/CVE-2017-13002",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13002",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13002",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13002",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13002",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13002",
      },
      {
         cve: "CVE-2017-13003",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13003",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13003",
               url: "https://www.suse.com/security/cve/CVE-2017-13003",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13003",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13003",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13003",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13003",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13003",
      },
      {
         cve: "CVE-2017-13004",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13004",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13004",
               url: "https://www.suse.com/security/cve/CVE-2017-13004",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13004",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13004",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13004",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13004",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13004",
      },
      {
         cve: "CVE-2017-13005",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13005",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13005",
               url: "https://www.suse.com/security/cve/CVE-2017-13005",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13005",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13005",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13005",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13005",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13005",
      },
      {
         cve: "CVE-2017-13006",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13006",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13006",
               url: "https://www.suse.com/security/cve/CVE-2017-13006",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13006",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13006",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13006",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13006",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13006",
      },
      {
         cve: "CVE-2017-13007",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13007",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13007",
               url: "https://www.suse.com/security/cve/CVE-2017-13007",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13007",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13007",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13007",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13007",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13007",
      },
      {
         cve: "CVE-2017-13008",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13008",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13008",
               url: "https://www.suse.com/security/cve/CVE-2017-13008",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13008",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13008",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13008",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13008",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13008",
      },
      {
         cve: "CVE-2017-13009",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13009",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13009",
               url: "https://www.suse.com/security/cve/CVE-2017-13009",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13009",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13009",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13009",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13009",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13009",
      },
      {
         cve: "CVE-2017-13010",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13010",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13010",
               url: "https://www.suse.com/security/cve/CVE-2017-13010",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13010",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13010",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13010",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13010",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13010",
      },
      {
         cve: "CVE-2017-13011",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13011",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13011",
               url: "https://www.suse.com/security/cve/CVE-2017-13011",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13011",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13011",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13011",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13011",
               url: "https://bugzilla.suse.com/1057247",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123142 for CVE-2017-13011",
               url: "https://bugzilla.suse.com/1123142",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13011",
      },
      {
         cve: "CVE-2017-13012",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13012",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13012",
               url: "https://www.suse.com/security/cve/CVE-2017-13012",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13012",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13012",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13012",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13012",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13012",
      },
      {
         cve: "CVE-2017-13013",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13013",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13013",
               url: "https://www.suse.com/security/cve/CVE-2017-13013",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13013",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13013",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13013",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13013",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13013",
      },
      {
         cve: "CVE-2017-13014",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13014",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13014",
               url: "https://www.suse.com/security/cve/CVE-2017-13014",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13014",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13014",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13014",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13014",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13014",
      },
      {
         cve: "CVE-2017-13015",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13015",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13015",
               url: "https://www.suse.com/security/cve/CVE-2017-13015",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13015",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13015",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13015",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13015",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13015",
      },
      {
         cve: "CVE-2017-13016",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13016",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13016",
               url: "https://www.suse.com/security/cve/CVE-2017-13016",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13016",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13016",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13016",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13016",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13016",
      },
      {
         cve: "CVE-2017-13017",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13017",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13017",
               url: "https://www.suse.com/security/cve/CVE-2017-13017",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13017",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13017",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13017",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13017",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13017",
      },
      {
         cve: "CVE-2017-13018",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13018",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13018",
               url: "https://www.suse.com/security/cve/CVE-2017-13018",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13018",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13018",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13018",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13018",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13018",
      },
      {
         cve: "CVE-2017-13019",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13019",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13019",
               url: "https://www.suse.com/security/cve/CVE-2017-13019",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13019",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13019",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13019",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13019",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13019",
      },
      {
         cve: "CVE-2017-13020",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13020",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13020",
               url: "https://www.suse.com/security/cve/CVE-2017-13020",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13020",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13020",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13020",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13020",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13020",
      },
      {
         cve: "CVE-2017-13021",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13021",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13021",
               url: "https://www.suse.com/security/cve/CVE-2017-13021",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13021",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13021",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13021",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13021",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13021",
      },
      {
         cve: "CVE-2017-13022",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13022",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13022",
               url: "https://www.suse.com/security/cve/CVE-2017-13022",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13022",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13022",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13022",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13022",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13022",
      },
      {
         cve: "CVE-2017-13023",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13023",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13023",
               url: "https://www.suse.com/security/cve/CVE-2017-13023",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13023",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13023",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13023",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13023",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13023",
      },
      {
         cve: "CVE-2017-13024",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13024",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13024",
               url: "https://www.suse.com/security/cve/CVE-2017-13024",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13024",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13024",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13024",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13024",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13024",
      },
      {
         cve: "CVE-2017-13025",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13025",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13025",
               url: "https://www.suse.com/security/cve/CVE-2017-13025",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13025",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13025",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13025",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13025",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13025",
      },
      {
         cve: "CVE-2017-13026",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13026",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13026",
               url: "https://www.suse.com/security/cve/CVE-2017-13026",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13026",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13026",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13026",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13026",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13026",
      },
      {
         cve: "CVE-2017-13027",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13027",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13027",
               url: "https://www.suse.com/security/cve/CVE-2017-13027",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13027",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13027",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13027",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13027",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13027",
      },
      {
         cve: "CVE-2017-13028",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13028",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13028",
               url: "https://www.suse.com/security/cve/CVE-2017-13028",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13028",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13028",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13028",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13028",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13028",
      },
      {
         cve: "CVE-2017-13029",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13029",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13029",
               url: "https://www.suse.com/security/cve/CVE-2017-13029",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13029",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13029",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13029",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13029",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13029",
      },
      {
         cve: "CVE-2017-13030",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13030",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13030",
               url: "https://www.suse.com/security/cve/CVE-2017-13030",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13030",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13030",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13030",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13030",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13030",
      },
      {
         cve: "CVE-2017-13031",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13031",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13031",
               url: "https://www.suse.com/security/cve/CVE-2017-13031",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13031",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13031",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13031",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13031",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13031",
      },
      {
         cve: "CVE-2017-13032",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13032",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13032",
               url: "https://www.suse.com/security/cve/CVE-2017-13032",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13032",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13032",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13032",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13032",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13032",
      },
      {
         cve: "CVE-2017-13033",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13033",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13033",
               url: "https://www.suse.com/security/cve/CVE-2017-13033",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13033",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13033",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13033",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13033",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13033",
      },
      {
         cve: "CVE-2017-13034",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13034",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13034",
               url: "https://www.suse.com/security/cve/CVE-2017-13034",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13034",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13034",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13034",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13034",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13034",
      },
      {
         cve: "CVE-2017-13035",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13035",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13035",
               url: "https://www.suse.com/security/cve/CVE-2017-13035",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13035",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13035",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13035",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13035",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13035",
      },
      {
         cve: "CVE-2017-13036",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13036",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13036",
               url: "https://www.suse.com/security/cve/CVE-2017-13036",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13036",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13036",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13036",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13036",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13036",
      },
      {
         cve: "CVE-2017-13037",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13037",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13037",
               url: "https://www.suse.com/security/cve/CVE-2017-13037",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13037",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13037",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13037",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13037",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13037",
      },
      {
         cve: "CVE-2017-13038",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13038",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13038",
               url: "https://www.suse.com/security/cve/CVE-2017-13038",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13038",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13038",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13038",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13038",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13038",
      },
      {
         cve: "CVE-2017-13039",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13039",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13039",
               url: "https://www.suse.com/security/cve/CVE-2017-13039",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13039",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13039",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13039",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13039",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13039",
      },
      {
         cve: "CVE-2017-13040",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13040",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13040",
               url: "https://www.suse.com/security/cve/CVE-2017-13040",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13040",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13040",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13040",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13040",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13040",
      },
      {
         cve: "CVE-2017-13041",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13041",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13041",
               url: "https://www.suse.com/security/cve/CVE-2017-13041",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13041",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13041",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13041",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13041",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13041",
      },
      {
         cve: "CVE-2017-13042",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13042",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13042",
               url: "https://www.suse.com/security/cve/CVE-2017-13042",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13042",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13042",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13042",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13042",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13042",
      },
      {
         cve: "CVE-2017-13043",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13043",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13043",
               url: "https://www.suse.com/security/cve/CVE-2017-13043",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13043",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13043",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13043",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13043",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13043",
      },
      {
         cve: "CVE-2017-13044",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13044",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13044",
               url: "https://www.suse.com/security/cve/CVE-2017-13044",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13044",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13044",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13044",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13044",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13044",
      },
      {
         cve: "CVE-2017-13045",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13045",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13045",
               url: "https://www.suse.com/security/cve/CVE-2017-13045",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13045",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13045",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13045",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13045",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13045",
      },
      {
         cve: "CVE-2017-13046",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13046",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13046",
               url: "https://www.suse.com/security/cve/CVE-2017-13046",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13046",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13046",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13046",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13046",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13046",
      },
      {
         cve: "CVE-2017-13047",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13047",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13047",
               url: "https://www.suse.com/security/cve/CVE-2017-13047",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13047",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13047",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13047",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13047",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13047",
      },
      {
         cve: "CVE-2017-13048",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13048",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13048",
               url: "https://www.suse.com/security/cve/CVE-2017-13048",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13048",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13048",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13048",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13048",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13048",
      },
      {
         cve: "CVE-2017-13049",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13049",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13049",
               url: "https://www.suse.com/security/cve/CVE-2017-13049",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13049",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13049",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13049",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13049",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13049",
      },
      {
         cve: "CVE-2017-13050",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13050",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13050",
               url: "https://www.suse.com/security/cve/CVE-2017-13050",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13050",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13050",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13050",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13050",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13050",
      },
      {
         cve: "CVE-2017-13051",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13051",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13051",
               url: "https://www.suse.com/security/cve/CVE-2017-13051",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13051",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13051",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13051",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13051",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13051",
      },
      {
         cve: "CVE-2017-13052",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13052",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13052",
               url: "https://www.suse.com/security/cve/CVE-2017-13052",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13052",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13052",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13052",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13052",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13052",
      },
      {
         cve: "CVE-2017-13053",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13053",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13053",
               url: "https://www.suse.com/security/cve/CVE-2017-13053",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13053",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13053",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13053",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13053",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13053",
      },
      {
         cve: "CVE-2017-13054",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13054",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13054",
               url: "https://www.suse.com/security/cve/CVE-2017-13054",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13054",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13054",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13054",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13054",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13054",
      },
      {
         cve: "CVE-2017-13055",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13055",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13055",
               url: "https://www.suse.com/security/cve/CVE-2017-13055",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13055",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13055",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13055",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13055",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13055",
      },
      {
         cve: "CVE-2017-13687",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13687",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13687",
               url: "https://www.suse.com/security/cve/CVE-2017-13687",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13687",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13687",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13687",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13687",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13687",
      },
      {
         cve: "CVE-2017-13688",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13688",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13688",
               url: "https://www.suse.com/security/cve/CVE-2017-13688",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13688",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13688",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13688",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13688",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13688",
      },
      {
         cve: "CVE-2017-13689",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13689",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13689",
               url: "https://www.suse.com/security/cve/CVE-2017-13689",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13689",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13689",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13689",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13689",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13689",
      },
      {
         cve: "CVE-2017-13690",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13690",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13690",
               url: "https://www.suse.com/security/cve/CVE-2017-13690",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13690",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13690",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13690",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13690",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13690",
      },
      {
         cve: "CVE-2017-13725",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-13725",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-13725",
               url: "https://www.suse.com/security/cve/CVE-2017-13725",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050219 for CVE-2017-13725",
               url: "https://bugzilla.suse.com/1050219",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050222 for CVE-2017-13725",
               url: "https://bugzilla.suse.com/1050222",
            },
            {
               category: "external",
               summary: "SUSE Bug 1050225 for CVE-2017-13725",
               url: "https://bugzilla.suse.com/1050225",
            },
            {
               category: "external",
               summary: "SUSE Bug 1057247 for CVE-2017-13725",
               url: "https://bugzilla.suse.com/1057247",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Desktop 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:tcpdump-4.9.2-14.5.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:tcpdump-4.9.2-14.5.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2017-10-26T07:44:55Z",
               details: "critical",
            },
         ],
         title: "CVE-2017-13725",
      },
   ],
}

cve-2017-12995

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/3a76fd7c95fced2c2f8c8148a9055c3a542eff29	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.512Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/3a76fd7c95fced2c2f8c8148a9055c3a542eff29",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/3a76fd7c95fced2c2f8c8148a9055c3a542eff29",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12995",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/3a76fd7c95fced2c2f8c8148a9055c3a542eff29",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/3a76fd7c95fced2c2f8c8148a9055c3a542eff29",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12995",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.512Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13051

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/289c672020280529fd382f3502efab7100d638ec	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.493Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/289c672020280529fd382f3502efab7100d638ec",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/289c672020280529fd382f3502efab7100d638ec",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13051",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/289c672020280529fd382f3502efab7100d638ec",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/289c672020280529fd382f3502efab7100d638ec",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13051",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.493Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13011

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/9f0730bee3eb65d07b49fd468bc2f269173352fe	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:10.664Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/9f0730bee3eb65d07b49fd468bc2f269173352fe",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/9f0730bee3eb65d07b49fd468bc2f269173352fe",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13011",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/9f0730bee3eb65d07b49fd468bc2f269173352fe",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/9f0730bee3eb65d07b49fd468bc2f269173352fe",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13011",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:10.664Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12895

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/2b62d1dda41590db29368ec7ba5f4faf3464765a	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.226Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/2b62d1dda41590db29368ec7ba5f4faf3464765a",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/2b62d1dda41590db29368ec7ba5f4faf3464765a",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12895",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/2b62d1dda41590db29368ec7ba5f4faf3464765a",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/2b62d1dda41590db29368ec7ba5f4faf3464765a",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12895",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-17T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.226Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13001

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/7a923447fd49a069a0fd3b6c3547438ab5ee2123	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.562Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/7a923447fd49a069a0fd3b6c3547438ab5ee2123",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/7a923447fd49a069a0fd3b6c3547438ab5ee2123",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13001",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/7a923447fd49a069a0fd3b6c3547438ab5ee2123",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/7a923447fd49a069a0fd3b6c3547438ab5ee2123",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13001",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.562Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13025

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/5338aac7b8b880b0c5e0c15e27dadc44c5559284	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.389Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/5338aac7b8b880b0c5e0c15e27dadc44c5559284",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/5338aac7b8b880b0c5e0c15e27dadc44c5559284",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13025",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/5338aac7b8b880b0c5e0c15e27dadc44c5559284",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/5338aac7b8b880b0c5e0c15e27dadc44c5559284",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13025",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.389Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13047

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/331530a4076c69bbd2e3214db6ccbe834fb75640	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.896Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/331530a4076c69bbd2e3214db6ccbe834fb75640",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/331530a4076c69bbd2e3214db6ccbe834fb75640",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13047",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/331530a4076c69bbd2e3214db6ccbe834fb75640",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/331530a4076c69bbd2e3214db6ccbe834fb75640",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13047",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.896Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13043

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/d515b4b4a300479cdf1a6e0d1bb95bc1f9fee514	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.779Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/d515b4b4a300479cdf1a6e0d1bb95bc1f9fee514",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/d515b4b4a300479cdf1a6e0d1bb95bc1f9fee514",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13043",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/d515b4b4a300479cdf1a6e0d1bb95bc1f9fee514",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/d515b4b4a300479cdf1a6e0d1bb95bc1f9fee514",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13043",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.779Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12902

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/6ec0c6fa63412c7a07a5bcb790a529c3563b4173	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/d17507ffa3e9742199b02a66aa940e79ababfa30	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.230Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/6ec0c6fa63412c7a07a5bcb790a529c3563b4173",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/d17507ffa3e9742199b02a66aa940e79ababfa30",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/6ec0c6fa63412c7a07a5bcb790a529c3563b4173",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/d17507ffa3e9742199b02a66aa940e79ababfa30",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12902",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/6ec0c6fa63412c7a07a5bcb790a529c3563b4173",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/6ec0c6fa63412c7a07a5bcb790a529c3563b4173",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/d17507ffa3e9742199b02a66aa940e79ababfa30",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/d17507ffa3e9742199b02a66aa940e79ababfa30",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12902",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-17T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.230Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12896

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/f76e7feb41a4327d2b0978449bbdafe98d4a3771	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/4e430c6b0d8b7e77c7abca7e7afb0c3e727502f2	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:06.900Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/f76e7feb41a4327d2b0978449bbdafe98d4a3771",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/4e430c6b0d8b7e77c7abca7e7afb0c3e727502f2",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/f76e7feb41a4327d2b0978449bbdafe98d4a3771",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/4e430c6b0d8b7e77c7abca7e7afb0c3e727502f2",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12896",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/f76e7feb41a4327d2b0978449bbdafe98d4a3771",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/f76e7feb41a4327d2b0978449bbdafe98d4a3771",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/4e430c6b0d8b7e77c7abca7e7afb0c3e727502f2",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/4e430c6b0d8b7e77c7abca7e7afb0c3e727502f2",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12896",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-17T00:00:00",
      dateUpdated: "2024-08-05T18:51:06.900Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13007

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/ca336198e8bebccc18502de27672fdbd6eb34856	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.226Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/ca336198e8bebccc18502de27672fdbd6eb34856",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/ca336198e8bebccc18502de27672fdbd6eb34856",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13007",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/ca336198e8bebccc18502de27672fdbd6eb34856",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/ca336198e8bebccc18502de27672fdbd6eb34856",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13007",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.226Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13045

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/3b36ec4e713dea9266db11975066c425aa669b6c	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.576Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/3b36ec4e713dea9266db11975066c425aa669b6c",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/3b36ec4e713dea9266db11975066c425aa669b6c",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13045",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/3b36ec4e713dea9266db11975066c425aa669b6c",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/3b36ec4e713dea9266db11975066c425aa669b6c",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13045",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.576Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13024

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/2e1f6d9320afa83abc1ff716c7981fa504edadf2	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/7d3aba9f06899d0128ef46e8a2fa143c6fad8f62	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.516Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/2e1f6d9320afa83abc1ff716c7981fa504edadf2",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/7d3aba9f06899d0128ef46e8a2fa143c6fad8f62",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/2e1f6d9320afa83abc1ff716c7981fa504edadf2",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/7d3aba9f06899d0128ef46e8a2fa143c6fad8f62",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13024",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/2e1f6d9320afa83abc1ff716c7981fa504edadf2",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/2e1f6d9320afa83abc1ff716c7981fa504edadf2",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/7d3aba9f06899d0128ef46e8a2fa143c6fad8f62",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/7d3aba9f06899d0128ef46e8a2fa143c6fad8f62",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13024",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.516Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13014

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/cc356512f512e7fa423b3674db4bb31dbe40ffec	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:10.687Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/cc356512f512e7fa423b3674db4bb31dbe40ffec",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/cc356512f512e7fa423b3674db4bb31dbe40ffec",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13014",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/cc356512f512e7fa423b3674db4bb31dbe40ffec",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/cc356512f512e7fa423b3674db4bb31dbe40ffec",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13014",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:10.687Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13044

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/c2f6833dddecf2d5fb89c9c898eee9981da342ed	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.527Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/c2f6833dddecf2d5fb89c9c898eee9981da342ed",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/c2f6833dddecf2d5fb89c9c898eee9981da342ed",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13044",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/c2f6833dddecf2d5fb89c9c898eee9981da342ed",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/c2f6833dddecf2d5fb89c9c898eee9981da342ed",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13044",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.527Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12992

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/e942fb84fbe3a73a98a00d2a279425872b5fb9d2	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.395Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/e942fb84fbe3a73a98a00d2a279425872b5fb9d2",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/e942fb84fbe3a73a98a00d2a279425872b5fb9d2",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12992",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/e942fb84fbe3a73a98a00d2a279425872b5fb9d2",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/e942fb84fbe3a73a98a00d2a279425872b5fb9d2",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12992",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.395Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13023

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT
	https://github.com/the-tcpdump-group/tcpdump/commit/b8e559afaeb8fe0604a1f8e3ad4dc1445de07a00	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.474Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/b8e559afaeb8fe0604a1f8e3ad4dc1445de07a00",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/b8e559afaeb8fe0604a1f8e3ad4dc1445de07a00",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13023",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/b8e559afaeb8fe0604a1f8e3ad4dc1445de07a00",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/b8e559afaeb8fe0604a1f8e3ad4dc1445de07a00",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13023",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.474Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13040

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/4c3aee4bb0294c232d56b6d34e9eeb74f630fe8c	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.206Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/4c3aee4bb0294c232d56b6d34e9eeb74f630fe8c",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/4c3aee4bb0294c232d56b6d34e9eeb74f630fe8c",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13040",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/4c3aee4bb0294c232d56b6d34e9eeb74f630fe8c",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/4c3aee4bb0294c232d56b6d34e9eeb74f630fe8c",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13040",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.206Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12897

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/1dcd10aceabbc03bf571ea32b892c522cbe923de	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.261Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/1dcd10aceabbc03bf571ea32b892c522cbe923de",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/1dcd10aceabbc03bf571ea32b892c522cbe923de",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12897",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/1dcd10aceabbc03bf571ea32b892c522cbe923de",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/1dcd10aceabbc03bf571ea32b892c522cbe923de",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12897",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-17T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.261Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13055

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/5d0d76e88ee2d3236d7e032589d6f1d4ec5f7b1e	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.298Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/5d0d76e88ee2d3236d7e032589d6f1d4ec5f7b1e",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/5d0d76e88ee2d3236d7e032589d6f1d4ec5f7b1e",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13055",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/5d0d76e88ee2d3236d7e032589d6f1d4ec5f7b1e",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/5d0d76e88ee2d3236d7e032589d6f1d4ec5f7b1e",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13055",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.298Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13039

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.415Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13039",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13039",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.415Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13002

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/cbddb98484ea8ec1deece351abd56e063d775b38	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.529Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/cbddb98484ea8ec1deece351abd56e063d775b38",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/cbddb98484ea8ec1deece351abd56e063d775b38",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13002",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/cbddb98484ea8ec1deece351abd56e063d775b38",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/cbddb98484ea8ec1deece351abd56e063d775b38",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13002",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.529Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13003

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/a25211918f2e790c67d859d20ccf8dbb81da1598	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.642Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/a25211918f2e790c67d859d20ccf8dbb81da1598",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/a25211918f2e790c67d859d20ccf8dbb81da1598",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13003",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/a25211918f2e790c67d859d20ccf8dbb81da1598",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/a25211918f2e790c67d859d20ccf8dbb81da1598",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13003",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.642Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12991

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/50a44b6b8e4f7c127440dbd4239cf571945cc1e7	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.370Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/50a44b6b8e4f7c127440dbd4239cf571945cc1e7",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/50a44b6b8e4f7c127440dbd4239cf571945cc1e7",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12991",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/50a44b6b8e4f7c127440dbd4239cf571945cc1e7",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/50a44b6b8e4f7c127440dbd4239cf571945cc1e7",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12991",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.370Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13687

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 19:05

Severity ?

Summary

The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://github.com/the-tcpdump-group/tcpdump/commit/a1eefe986065846b6c69dbc09afd9fa1a02c4a3d	x_refsource_CONFIRM
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/866c60236c41cea1e1654c8a071897292f64be49	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T19:05:19.299Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/a1eefe986065846b6c69dbc09afd9fa1a02c4a3d",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/866c60236c41cea1e1654c8a071897292f64be49",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/a1eefe986065846b6c69dbc09afd9fa1a02c4a3d",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/866c60236c41cea1e1654c8a071897292f64be49",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13687",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/a1eefe986065846b6c69dbc09afd9fa1a02c4a3d",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/a1eefe986065846b6c69dbc09afd9fa1a02c4a3d",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/866c60236c41cea1e1654c8a071897292f64be49",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/866c60236c41cea1e1654c8a071897292f64be49",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13687",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-25T00:00:00",
      dateUpdated: "2024-08-05T19:05:19.299Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12993

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/b534e304568585707c4a92422aeca25cf908ff02	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.426Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/b534e304568585707c4a92422aeca25cf908ff02",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/b534e304568585707c4a92422aeca25cf908ff02",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12993",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/b534e304568585707c4a92422aeca25cf908ff02",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/b534e304568585707c4a92422aeca25cf908ff02",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12993",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.426Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12985

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/66df248b49095c261138b5a5e34d341a6bf9ac7f	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.347Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/66df248b49095c261138b5a5e34d341a6bf9ac7f",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/66df248b49095c261138b5a5e34d341a6bf9ac7f",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12985",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/66df248b49095c261138b5a5e34d341a6bf9ac7f",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/66df248b49095c261138b5a5e34d341a6bf9ac7f",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12985",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.347Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12986

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/7ac73d6cd41e9d4ac0ca7e6830ca390e195bb21c	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.415Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/7ac73d6cd41e9d4ac0ca7e6830ca390e195bb21c",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/7ac73d6cd41e9d4ac0ca7e6830ca390e195bb21c",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12986",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/7ac73d6cd41e9d4ac0ca7e6830ca390e195bb21c",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/7ac73d6cd41e9d4ac0ca7e6830ca390e195bb21c",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12986",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.415Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13029

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.275Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13029",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13029",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.275Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12894

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/730fc35968c5433b9e2a829779057f4f9495dc51	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.134Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/730fc35968c5433b9e2a829779057f4f9495dc51",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/730fc35968c5433b9e2a829779057f4f9495dc51",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12894",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/730fc35968c5433b9e2a829779057f4f9495dc51",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/730fc35968c5433b9e2a829779057f4f9495dc51",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12894",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-17T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.134Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13053

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://github.com/the-tcpdump-group/tcpdump/commit/bd4e697ebd6c8457efa8f28f6831fc929b88a014	x_refsource_CONFIRM
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.276Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/bd4e697ebd6c8457efa8f28f6831fc929b88a014",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/bd4e697ebd6c8457efa8f28f6831fc929b88a014",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13053",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/bd4e697ebd6c8457efa8f28f6831fc929b88a014",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/bd4e697ebd6c8457efa8f28f6831fc929b88a014",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13053",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.276Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12900

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT
	https://github.com/the-tcpdump-group/tcpdump/commit/0318fa8b61bd6c837641129d585f1a73c652b1e0	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.230Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/0318fa8b61bd6c837641129d585f1a73c652b1e0",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/0318fa8b61bd6c837641129d585f1a73c652b1e0",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12900",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/0318fa8b61bd6c837641129d585f1a73c652b1e0",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/0318fa8b61bd6c837641129d585f1a73c652b1e0",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12900",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-17T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.230Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13688

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 19:05

Severity ?

Summary

The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/0cb1b8a434b599b8d636db029aadb757c24e39d6	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T19:05:19.428Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/0cb1b8a434b599b8d636db029aadb757c24e39d6",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/0cb1b8a434b599b8d636db029aadb757c24e39d6",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13688",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/0cb1b8a434b599b8d636db029aadb757c24e39d6",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/0cb1b8a434b599b8d636db029aadb757c24e39d6",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13688",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-25T00:00:00",
      dateUpdated: "2024-08-05T19:05:19.428Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12901

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT
	https://github.com/the-tcpdump-group/tcpdump/commit/de981e6070d168b58ec1bb0713ded77ed4ad87f4	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.234Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/de981e6070d168b58ec1bb0713ded77ed4ad87f4",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/de981e6070d168b58ec1bb0713ded77ed4ad87f4",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12901",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/de981e6070d168b58ec1bb0713ded77ed4ad87f4",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/de981e6070d168b58ec1bb0713ded77ed4ad87f4",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12901",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-17T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.234Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13004

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/42073d54c53a496be40ae84152bbfe2c923ac7bc	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/35d146b7a66496d72cdeb95ccb33ab80a265ce90	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:10.681Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/42073d54c53a496be40ae84152bbfe2c923ac7bc",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/35d146b7a66496d72cdeb95ccb33ab80a265ce90",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/42073d54c53a496be40ae84152bbfe2c923ac7bc",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/35d146b7a66496d72cdeb95ccb33ab80a265ce90",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13004",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/42073d54c53a496be40ae84152bbfe2c923ac7bc",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/42073d54c53a496be40ae84152bbfe2c923ac7bc",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/35d146b7a66496d72cdeb95ccb33ab80a265ce90",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/35d146b7a66496d72cdeb95ccb33ab80a265ce90",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13004",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:10.681Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13038

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://github.com/the-tcpdump-group/tcpdump/commit/7335163a6ef82d46ff18f3e6099a157747241629	x_refsource_CONFIRM
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.414Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/7335163a6ef82d46ff18f3e6099a157747241629",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/7335163a6ef82d46ff18f3e6099a157747241629",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13038",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/7335163a6ef82d46ff18f3e6099a157747241629",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/7335163a6ef82d46ff18f3e6099a157747241629",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13038",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.414Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12996

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/6fca58f5f9c96749a575f52e20598ad43f5bdf30	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.463Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/6fca58f5f9c96749a575f52e20598ad43f5bdf30",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/6fca58f5f9c96749a575f52e20598ad43f5bdf30",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12996",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/6fca58f5f9c96749a575f52e20598ad43f5bdf30",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/6fca58f5f9c96749a575f52e20598ad43f5bdf30",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12996",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.463Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13012

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/8509ef02eceb2bbb479cea10fe4a7ec6395f1a8b	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.772Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/8509ef02eceb2bbb479cea10fe4a7ec6395f1a8b",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/8509ef02eceb2bbb479cea10fe4a7ec6395f1a8b",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13012",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/8509ef02eceb2bbb479cea10fe4a7ec6395f1a8b",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/8509ef02eceb2bbb479cea10fe4a7ec6395f1a8b",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13012",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.772Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12989

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/db24063b01cba8e9d4d88b7d8ac70c9000c104e4	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.435Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/db24063b01cba8e9d4d88b7d8ac70c9000c104e4",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/db24063b01cba8e9d4d88b7d8ac70c9000c104e4",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12989",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/db24063b01cba8e9d4d88b7d8ac70c9000c104e4",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/db24063b01cba8e9d4d88b7d8ac70c9000c104e4",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12989",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.435Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13028

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/29e5470e6ab84badbc31f4532bb7554a796d9d52	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/66e22961b30547e9a8daa1f0e8dc9fbe6e2698fa	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.487Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/29e5470e6ab84badbc31f4532bb7554a796d9d52",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/66e22961b30547e9a8daa1f0e8dc9fbe6e2698fa",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/29e5470e6ab84badbc31f4532bb7554a796d9d52",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/66e22961b30547e9a8daa1f0e8dc9fbe6e2698fa",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13028",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/29e5470e6ab84badbc31f4532bb7554a796d9d52",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/29e5470e6ab84badbc31f4532bb7554a796d9d52",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/66e22961b30547e9a8daa1f0e8dc9fbe6e2698fa",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/66e22961b30547e9a8daa1f0e8dc9fbe6e2698fa",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13028",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.487Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13005

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/b45a9a167ca6a3ef2752ae9d48d56ac14b001bfd	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:10.671Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/b45a9a167ca6a3ef2752ae9d48d56ac14b001bfd",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/b45a9a167ca6a3ef2752ae9d48d56ac14b001bfd",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13005",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/b45a9a167ca6a3ef2752ae9d48d56ac14b001bfd",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/b45a9a167ca6a3ef2752ae9d48d56ac14b001bfd",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13005",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:10.671Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13013

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/13ab8d18617d616c7d343530f8a842e7143fb5cc	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.784Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/13ab8d18617d616c7d343530f8a842e7143fb5cc",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/13ab8d18617d616c7d343530f8a842e7143fb5cc",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13013",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/13ab8d18617d616c7d343530f8a842e7143fb5cc",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/13ab8d18617d616c7d343530f8a842e7143fb5cc",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13013",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.784Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13030

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/5dc1860d8267b1e0cb78c9ffa2a40bea2fdb3ddc	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.607Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/5dc1860d8267b1e0cb78c9ffa2a40bea2fdb3ddc",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/5dc1860d8267b1e0cb78c9ffa2a40bea2fdb3ddc",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13030",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/5dc1860d8267b1e0cb78c9ffa2a40bea2fdb3ddc",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/5dc1860d8267b1e0cb78c9ffa2a40bea2fdb3ddc",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13030",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.607Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12893

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/6f5ba2b651cd9d4b7fa8ee5c4f94460645877c45	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.219Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/6f5ba2b651cd9d4b7fa8ee5c4f94460645877c45",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/6f5ba2b651cd9d4b7fa8ee5c4f94460645877c45",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12893",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/6f5ba2b651cd9d4b7fa8ee5c4f94460645877c45",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/6f5ba2b651cd9d4b7fa8ee5c4f94460645877c45",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12893",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-17T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.219Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13010

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/877b66b398518d9501513e0860c9f3a8acc70892	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:10.681Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/877b66b398518d9501513e0860c9f3a8acc70892",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/877b66b398518d9501513e0860c9f3a8acc70892",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13010",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/877b66b398518d9501513e0860c9f3a8acc70892",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/877b66b398518d9501513e0860c9f3a8acc70892",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13010",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:10.681Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13042

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/39582c04cc5e34054b2936b423072fb9df2ff6ef	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.332Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/39582c04cc5e34054b2936b423072fb9df2ff6ef",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/39582c04cc5e34054b2936b423072fb9df2ff6ef",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13042",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/39582c04cc5e34054b2936b423072fb9df2ff6ef",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/39582c04cc5e34054b2936b423072fb9df2ff6ef",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13042",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.332Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13689

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 19:05

Severity ?

Summary

The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/061e7371a944588f231cb1b66d6fb070b646e376	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T19:05:19.512Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/061e7371a944588f231cb1b66d6fb070b646e376",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/061e7371a944588f231cb1b66d6fb070b646e376",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13689",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/061e7371a944588f231cb1b66d6fb070b646e376",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/061e7371a944588f231cb1b66d6fb070b646e376",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13689",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-25T00:00:00",
      dateUpdated: "2024-08-05T19:05:19.512Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13049

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/aa0858100096a3490edf93034a80e66a4d61aad5	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.581Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/aa0858100096a3490edf93034a80e66a4d61aad5",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/aa0858100096a3490edf93034a80e66a4d61aad5",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13049",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/aa0858100096a3490edf93034a80e66a4d61aad5",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/aa0858100096a3490edf93034a80e66a4d61aad5",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13049",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.581Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13015

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/985122081165753c7442bd7824c473eb9ff56308	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.338Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/985122081165753c7442bd7824c473eb9ff56308",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/985122081165753c7442bd7824c473eb9ff56308",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13015",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/985122081165753c7442bd7824c473eb9ff56308",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/985122081165753c7442bd7824c473eb9ff56308",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13015",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.338Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13050

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/83c64fce3a5226b080e535f5131a8a318f30e79b	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.886Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/83c64fce3a5226b080e535f5131a8a318f30e79b",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/83c64fce3a5226b080e535f5131a8a318f30e79b",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13050",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/83c64fce3a5226b080e535f5131a8a318f30e79b",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/83c64fce3a5226b080e535f5131a8a318f30e79b",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13050",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.886Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13017

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/11b426ee05eb62ed103218526f1fa616851c43ce	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.236Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/11b426ee05eb62ed103218526f1fa616851c43ce",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/11b426ee05eb62ed103218526f1fa616851c43ce",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13017",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/11b426ee05eb62ed103218526f1fa616851c43ce",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/11b426ee05eb62ed103218526f1fa616851c43ce",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13017",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.236Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13032

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/1bc78d795cd5cad5525498658f414a11ea0a7e9c	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.509Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/1bc78d795cd5cad5525498658f414a11ea0a7e9c",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/1bc78d795cd5cad5525498658f414a11ea0a7e9c",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13032",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/1bc78d795cd5cad5525498658f414a11ea0a7e9c",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/1bc78d795cd5cad5525498658f414a11ea0a7e9c",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13032",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.509Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12899

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/c6e0531b5def26ecf912e8de6ade86cbdaed3751	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/f96003b21e2abfbba59b926b10a7f9bc7d11e36c	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.300Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/c6e0531b5def26ecf912e8de6ade86cbdaed3751",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/f96003b21e2abfbba59b926b10a7f9bc7d11e36c",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/c6e0531b5def26ecf912e8de6ade86cbdaed3751",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/f96003b21e2abfbba59b926b10a7f9bc7d11e36c",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12899",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/c6e0531b5def26ecf912e8de6ade86cbdaed3751",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/c6e0531b5def26ecf912e8de6ade86cbdaed3751",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/f96003b21e2abfbba59b926b10a7f9bc7d11e36c",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/f96003b21e2abfbba59b926b10a7f9bc7d11e36c",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12899",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-17T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.300Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13022

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/eee0b04bcfdae319c242b0b8fc3d07029ee65b8c	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.400Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/eee0b04bcfdae319c242b0b8fc3d07029ee65b8c",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/eee0b04bcfdae319c242b0b8fc3d07029ee65b8c",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13022",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/eee0b04bcfdae319c242b0b8fc3d07029ee65b8c",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/eee0b04bcfdae319c242b0b8fc3d07029ee65b8c",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13022",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.400Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12987

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/99798bd9a41bd3d03fdc1e949810a38967f20ed3	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/2ecb9d2c67d9119250c54811a6ce4d0f2ddf44f1	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.396Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/99798bd9a41bd3d03fdc1e949810a38967f20ed3",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/2ecb9d2c67d9119250c54811a6ce4d0f2ddf44f1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/99798bd9a41bd3d03fdc1e949810a38967f20ed3",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/2ecb9d2c67d9119250c54811a6ce4d0f2ddf44f1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12987",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/99798bd9a41bd3d03fdc1e949810a38967f20ed3",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/99798bd9a41bd3d03fdc1e949810a38967f20ed3",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/2ecb9d2c67d9119250c54811a6ce4d0f2ddf44f1",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/2ecb9d2c67d9119250c54811a6ce4d0f2ddf44f1",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12987",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.396Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12997

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/34cec721d39c76be1e0a600829a7b17bdfb832b6	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/100914	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.512Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/34cec721d39c76be1e0a600829a7b17bdfb832b6",
               },
               {
                  name: "100914",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/100914",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/34cec721d39c76be1e0a600829a7b17bdfb832b6",
            },
            {
               name: "100914",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/100914",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12997",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/34cec721d39c76be1e0a600829a7b17bdfb832b6",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/34cec721d39c76be1e0a600829a7b17bdfb832b6",
                  },
                  {
                     name: "100914",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/100914",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12997",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.512Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13725

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 19:05

Severity ?

Summary

The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/c7c515ee03c285cc51376328de4ae9d549e501a5	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/3c4d7c0ee30a30e5abff3d6d9586a3753101faf5	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T19:05:20.019Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/c7c515ee03c285cc51376328de4ae9d549e501a5",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/3c4d7c0ee30a30e5abff3d6d9586a3753101faf5",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/c7c515ee03c285cc51376328de4ae9d549e501a5",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/3c4d7c0ee30a30e5abff3d6d9586a3753101faf5",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13725",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/c7c515ee03c285cc51376328de4ae9d549e501a5",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/c7c515ee03c285cc51376328de4ae9d549e501a5",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/3c4d7c0ee30a30e5abff3d6d9586a3753101faf5",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/3c4d7c0ee30a30e5abff3d6d9586a3753101faf5",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13725",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-28T00:00:00",
      dateUpdated: "2024-08-05T19:05:20.019Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13009

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/db8c799f6dfc68765c9451fcbfca06e662f5bd5f	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:10.696Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/db8c799f6dfc68765c9451fcbfca06e662f5bd5f",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/db8c799f6dfc68765c9451fcbfca06e662f5bd5f",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13009",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/db8c799f6dfc68765c9451fcbfca06e662f5bd5f",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/db8c799f6dfc68765c9451fcbfca06e662f5bd5f",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13009",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:10.696Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-11542

Vulnerability from cvelistv5

Published

2017-07-23 03:00

Modified

2024-08-05 18:12

Severity ?

Summary

tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/print-pim	x_refsource_MISC
	http://www.securityfocus.com/bid/99940	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:12:40.254Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/print-pim",
               },
               {
                  name: "99940",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/99940",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-07-22T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/print-pim",
            },
            {
               name: "99940",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/99940",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-11542",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/print-pim",
                     refsource: "MISC",
                     url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/print-pim",
                  },
                  {
                     name: "99940",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/99940",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-11542",
      datePublished: "2017-07-23T03:00:00",
      dateReserved: "2017-07-22T00:00:00",
      dateUpdated: "2024-08-05T18:12:40.254Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13037

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/2c2cfbd2b771ac888bc5c4a6d922f749d3822538	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.917Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/2c2cfbd2b771ac888bc5c4a6d922f749d3822538",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/2c2cfbd2b771ac888bc5c4a6d922f749d3822538",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13037",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/2c2cfbd2b771ac888bc5c4a6d922f749d3822538",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/2c2cfbd2b771ac888bc5c4a6d922f749d3822538",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13037",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.917Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13035

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/571a6f33f47e7a2394fa08f925e534135c29cf1e	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.158Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/571a6f33f47e7a2394fa08f925e534135c29cf1e",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/571a6f33f47e7a2394fa08f925e534135c29cf1e",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13035",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/571a6f33f47e7a2394fa08f925e534135c29cf1e",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/571a6f33f47e7a2394fa08f925e534135c29cf1e",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13035",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.158Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12988

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/8934a7d6307267d301182f19ed162563717e29e3	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.384Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/8934a7d6307267d301182f19ed162563717e29e3",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/8934a7d6307267d301182f19ed162563717e29e3",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12988",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/8934a7d6307267d301182f19ed162563717e29e3",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/8934a7d6307267d301182f19ed162563717e29e3",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12988",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.384Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13000

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://github.com/the-tcpdump-group/tcpdump/commit/8512734883227c11568bb35da1d48b9f8466f43f	x_refsource_CONFIRM
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/a7e5f58f402e6919ec444a57946bade7dfd6b184	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/9be4e0b5938b705e7e36cfcb110a740c6ff0cb97	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.483Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/8512734883227c11568bb35da1d48b9f8466f43f",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/a7e5f58f402e6919ec444a57946bade7dfd6b184",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/9be4e0b5938b705e7e36cfcb110a740c6ff0cb97",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/8512734883227c11568bb35da1d48b9f8466f43f",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/a7e5f58f402e6919ec444a57946bade7dfd6b184",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/9be4e0b5938b705e7e36cfcb110a740c6ff0cb97",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13000",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/8512734883227c11568bb35da1d48b9f8466f43f",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/8512734883227c11568bb35da1d48b9f8466f43f",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/a7e5f58f402e6919ec444a57946bade7dfd6b184",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/a7e5f58f402e6919ec444a57946bade7dfd6b184",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/9be4e0b5938b705e7e36cfcb110a740c6ff0cb97",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/9be4e0b5938b705e7e36cfcb110a740c6ff0cb97",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13000",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.483Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13006

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/cc4a7391c616be7a64ed65742ef9ed3f106eb165	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:10.690Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/cc4a7391c616be7a64ed65742ef9ed3f106eb165",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/cc4a7391c616be7a64ed65742ef9ed3f106eb165",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13006",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/cc4a7391c616be7a64ed65742ef9ed3f106eb165",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/cc4a7391c616be7a64ed65742ef9ed3f106eb165",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13006",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:10.690Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13041

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/f4b9e24c7384d882a7f434cc7413925bf871d63e	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.594Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/f4b9e24c7384d882a7f434cc7413925bf871d63e",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/f4b9e24c7384d882a7f434cc7413925bf871d63e",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13041",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/f4b9e24c7384d882a7f434cc7413925bf871d63e",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/f4b9e24c7384d882a7f434cc7413925bf871d63e",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13041",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.594Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13052

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/5d340a5ca6e420a70297cdbdf777333f18bfdab7	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.450Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/5d340a5ca6e420a70297cdbdf777333f18bfdab7",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/5d340a5ca6e420a70297cdbdf777333f18bfdab7",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13052",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/5d340a5ca6e420a70297cdbdf777333f18bfdab7",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/5d340a5ca6e420a70297cdbdf777333f18bfdab7",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13052",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.450Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13008

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/5edf405d7ed9fc92f4f43e8a3d44baa4c6387562	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.671Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/5edf405d7ed9fc92f4f43e8a3d44baa4c6387562",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/5edf405d7ed9fc92f4f43e8a3d44baa4c6387562",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13008",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/5edf405d7ed9fc92f4f43e8a3d44baa4c6387562",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/5edf405d7ed9fc92f4f43e8a3d44baa4c6387562",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13008",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.671Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13046

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/d10a0f980fe8f9407ab1ffbd612641433ebe175e	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.186Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/d10a0f980fe8f9407ab1ffbd612641433ebe175e",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/d10a0f980fe8f9407ab1ffbd612641433ebe175e",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13046",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/d10a0f980fe8f9407ab1ffbd612641433ebe175e",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/d10a0f980fe8f9407ab1ffbd612641433ebe175e",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13046",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.186Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12998

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/979dcefd7b259e9e233f77fe1c5312793bfd948f	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.526Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/979dcefd7b259e9e233f77fe1c5312793bfd948f",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/979dcefd7b259e9e233f77fe1c5312793bfd948f",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12998",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/979dcefd7b259e9e233f77fe1c5312793bfd948f",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/979dcefd7b259e9e233f77fe1c5312793bfd948f",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12998",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.526Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13026

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/b20e1639dbac84b3fcb393858521c13ad47a9d70	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.288Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/b20e1639dbac84b3fcb393858521c13ad47a9d70",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/b20e1639dbac84b3fcb393858521c13ad47a9d70",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13026",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/b20e1639dbac84b3fcb393858521c13ad47a9d70",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/b20e1639dbac84b3fcb393858521c13ad47a9d70",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13026",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.288Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13054

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/e6511cc1a950fe1566b2236329d6b4bd0826cc7a	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.303Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/e6511cc1a950fe1566b2236329d6b4bd0826cc7a",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/e6511cc1a950fe1566b2236329d6b4bd0826cc7a",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13054",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/e6511cc1a950fe1566b2236329d6b4bd0826cc7a",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/e6511cc1a950fe1566b2236329d6b4bd0826cc7a",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13054",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.303Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13027

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/a77ff09c46560bc895dea11dc9fe643486b056ac	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.494Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/a77ff09c46560bc895dea11dc9fe643486b056ac",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/a77ff09c46560bc895dea11dc9fe643486b056ac",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13027",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/a77ff09c46560bc895dea11dc9fe643486b056ac",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/a77ff09c46560bc895dea11dc9fe643486b056ac",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13027",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.494Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13021

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/67c7126062d59729cd421bb38f9594015c9907ba	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.340Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/67c7126062d59729cd421bb38f9594015c9907ba",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/67c7126062d59729cd421bb38f9594015c9907ba",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13021",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/67c7126062d59729cd421bb38f9594015c9907ba",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/67c7126062d59729cd421bb38f9594015c9907ba",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13021",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.340Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12999

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/3b32029db354cbc875127869d9b12a9addc75b50	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.527Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/3b32029db354cbc875127869d9b12a9addc75b50",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/3b32029db354cbc875127869d9b12a9addc75b50",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12999",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/3b32029db354cbc875127869d9b12a9addc75b50",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/3b32029db354cbc875127869d9b12a9addc75b50",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12999",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.527Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13036

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/88b2dac837e81cf56dce05e6e7b5989332c0092d	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.435Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/88b2dac837e81cf56dce05e6e7b5989332c0092d",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/88b2dac837e81cf56dce05e6e7b5989332c0092d",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13036",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/88b2dac837e81cf56dce05e6e7b5989332c0092d",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/88b2dac837e81cf56dce05e6e7b5989332c0092d",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13036",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.435Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13031

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/2d669862df7cd17f539129049f6fb70d17174125	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.925Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/2d669862df7cd17f539129049f6fb70d17174125",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/2d669862df7cd17f539129049f6fb70d17174125",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13031",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/2d669862df7cd17f539129049f6fb70d17174125",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/2d669862df7cd17f539129049f6fb70d17174125",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13031",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.925Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12898

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/19d25dd8781620cd41bf178a5e2e27fc1cf242d0	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.243Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/19d25dd8781620cd41bf178a5e2e27fc1cf242d0",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/19d25dd8781620cd41bf178a5e2e27fc1cf242d0",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12898",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/19d25dd8781620cd41bf178a5e2e27fc1cf242d0",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/19d25dd8781620cd41bf178a5e2e27fc1cf242d0",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12898",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-17T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.243Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-11543

Vulnerability from cvelistv5

Published

2017-07-23 03:00

Modified

2024-08-05 18:12

Severity ?

Summary

tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/99939	vdb-entry, x_refsource_BID
	https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/global-overflow/print-sl	x_refsource_MISC
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:12:40.233Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  name: "99939",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/99939",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/global-overflow/print-sl",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-07-22T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               name: "99939",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/99939",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/global-overflow/print-sl",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-11543",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "99939",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/99939",
                  },
                  {
                     name: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/global-overflow/print-sl",
                     refsource: "MISC",
                     url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/global-overflow/print-sl",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-11543",
      datePublished: "2017-07-23T03:00:00",
      dateReserved: "2017-07-22T00:00:00",
      dateUpdated: "2024-08-05T18:12:40.233Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12994

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/ffde45acf3348f8353fb4064a1b21683ee6b5ddf	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.380Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/ffde45acf3348f8353fb4064a1b21683ee6b5ddf",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/ffde45acf3348f8353fb4064a1b21683ee6b5ddf",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12994",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/ffde45acf3348f8353fb4064a1b21683ee6b5ddf",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/ffde45acf3348f8353fb4064a1b21683ee6b5ddf",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12994",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.380Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13020

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/d692d67332bcc90540088ad8e725eb3279e39863	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://github.com/the-tcpdump-group/tcpdump/commit/c5dd7bef5e54da5996dc4713284aa6266ae75b75	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.608Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/d692d67332bcc90540088ad8e725eb3279e39863",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/c5dd7bef5e54da5996dc4713284aa6266ae75b75",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/d692d67332bcc90540088ad8e725eb3279e39863",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/c5dd7bef5e54da5996dc4713284aa6266ae75b75",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13020",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/d692d67332bcc90540088ad8e725eb3279e39863",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/d692d67332bcc90540088ad8e725eb3279e39863",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/c5dd7bef5e54da5996dc4713284aa6266ae75b75",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/c5dd7bef5e54da5996dc4713284aa6266ae75b75",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13020",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.608Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13033

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/ae83295915d08a854de27a88efac5dd7353e6d3f	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.127Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/ae83295915d08a854de27a88efac5dd7353e6d3f",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/ae83295915d08a854de27a88efac5dd7353e6d3f",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13033",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/ae83295915d08a854de27a88efac5dd7353e6d3f",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/ae83295915d08a854de27a88efac5dd7353e6d3f",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13033",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.127Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-11541

Vulnerability from cvelistv5

Published

2017-07-23 03:00

Modified

2024-08-05 18:12

Severity ?

Summary

tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/99941	vdb-entry, x_refsource_BID
	https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print	x_refsource_MISC
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:12:40.221Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  name: "99941",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/99941",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-07-22T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               name: "99941",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/99941",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-11541",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "99941",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/99941",
                  },
                  {
                     name: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print",
                     refsource: "MISC",
                     url: "https://github.com/hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/util-print",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-11541",
      datePublished: "2017-07-23T03:00:00",
      dateReserved: "2017-07-22T00:00:00",
      dateUpdated: "2024-08-05T18:12:40.221Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-12990

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:51

Severity ?

Summary

The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/c2ef693866beae071a24b45c49f9674af1df4028	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:51:07.525Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/c2ef693866beae071a24b45c49f9674af1df4028",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/c2ef693866beae071a24b45c49f9674af1df4028",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-12990",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/c2ef693866beae071a24b45c49f9674af1df4028",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/c2ef693866beae071a24b45c49f9674af1df4028",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-12990",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:51:07.525Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-11108

Vulnerability from cvelistv5

Published

2017-07-08 17:00

Modified

2024-08-05 17:57

Severity ?

Summary

tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=1468504	x_refsource_MISC
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T17:57:57.636Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1468504",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-07-08T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1468504",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-11108",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1468504",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1468504",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-11108",
      datePublished: "2017-07-08T17:00:00",
      dateReserved: "2017-07-08T00:00:00",
      dateUpdated: "2024-08-05T17:57:57.636Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13690

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 19:05

Severity ?

Summary

The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/8dca25d26c7ca2caf6138267f6f17111212c156e	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T19:05:19.410Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/8dca25d26c7ca2caf6138267f6f17111212c156e",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/8dca25d26c7ca2caf6138267f6f17111212c156e",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13690",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/8dca25d26c7ca2caf6138267f6f17111212c156e",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/8dca25d26c7ca2caf6138267f6f17111212c156e",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13690",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-25T00:00:00",
      dateUpdated: "2024-08-05T19:05:19.410Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13019

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/4601c685e7fd19c3724d5e499c69b8d3ec49933e	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.493Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/4601c685e7fd19c3724d5e499c69b8d3ec49933e",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/4601c685e7fd19c3724d5e499c69b8d3ec49933e",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13019",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/4601c685e7fd19c3724d5e499c69b8d3ec49933e",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/4601c685e7fd19c3724d5e499c69b8d3ec49933e",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13019",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.493Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13034

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/da6f1a677bfa4476abaeaf9b1afe1c4390f51b41	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:12.264Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/da6f1a677bfa4476abaeaf9b1afe1c4390f51b41",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/da6f1a677bfa4476abaeaf9b1afe1c4390f51b41",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13034",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/da6f1a677bfa4476abaeaf9b1afe1c4390f51b41",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/da6f1a677bfa4476abaeaf9b1afe1c4390f51b41",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13034",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:12.264Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13048

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/3c8a2b0e91d8d8947e89384dacf6b54673083e71	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.694Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/3c8a2b0e91d8d8947e89384dacf6b54673083e71",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/3c8a2b0e91d8d8947e89384dacf6b54673083e71",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13048",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/3c8a2b0e91d8d8947e89384dacf6b54673083e71",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/3c8a2b0e91d8d8947e89384dacf6b54673083e71",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13048",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.694Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13018

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	https://github.com/the-tcpdump-group/tcpdump/commit/26a6799b9ca80508c05cac7a9a3bef922991520b	x_refsource_CONFIRM
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:11.870Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/26a6799b9ca80508c05cac7a9a3bef922991520b",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/26a6799b9ca80508c05cac7a9a3bef922991520b",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13018",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/26a6799b9ca80508c05cac7a9a3bef922991520b",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/26a6799b9ca80508c05cac7a9a3bef922991520b",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13018",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:11.870Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-13016

Vulnerability from cvelistv5

Published

2017-09-14 06:00

Modified

2024-08-05 18:58

Severity ?

Summary

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201709-23	vendor-advisory, x_refsource_GENTOO
	https://support.apple.com/HT208221	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3971	vendor-advisory, x_refsource_DEBIAN
	https://github.com/the-tcpdump-group/tcpdump/commit/c177cb3800a9a68d79b2812f0ffcb9479abd6eb8	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039307	vdb-entry, x_refsource_SECTRACK
	http://www.tcpdump.org/tcpdump-changes.txt	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHEA-2018:0705	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T18:58:10.671Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-201709-23",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201709-23",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT208221",
               },
               {
                  name: "DSA-3971",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2017/dsa-3971",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/the-tcpdump-group/tcpdump/commit/c177cb3800a9a68d79b2812f0ffcb9479abd6eb8",
               },
               {
                  name: "1039307",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1039307",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.tcpdump.org/tcpdump-changes.txt",
               },
               {
                  name: "RHEA-2018:0705",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHEA-2018:0705",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-09-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-16T09:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-201709-23",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201709-23",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT208221",
            },
            {
               name: "DSA-3971",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2017/dsa-3971",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/the-tcpdump-group/tcpdump/commit/c177cb3800a9a68d79b2812f0ffcb9479abd6eb8",
            },
            {
               name: "1039307",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1039307",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.tcpdump.org/tcpdump-changes.txt",
            },
            {
               name: "RHEA-2018:0705",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHEA-2018:0705",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2017-13016",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-201709-23",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201709-23",
                  },
                  {
                     name: "https://support.apple.com/HT208221",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT208221",
                  },
                  {
                     name: "DSA-3971",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2017/dsa-3971",
                  },
                  {
                     name: "https://github.com/the-tcpdump-group/tcpdump/commit/c177cb3800a9a68d79b2812f0ffcb9479abd6eb8",
                     refsource: "CONFIRM",
                     url: "https://github.com/the-tcpdump-group/tcpdump/commit/c177cb3800a9a68d79b2812f0ffcb9479abd6eb8",
                  },
                  {
                     name: "1039307",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1039307",
                  },
                  {
                     name: "http://www.tcpdump.org/tcpdump-changes.txt",
                     refsource: "CONFIRM",
                     url: "http://www.tcpdump.org/tcpdump-changes.txt",
                  },
                  {
                     name: "RHEA-2018:0705",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHEA-2018:0705",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2017-13016",
      datePublished: "2017-09-14T06:00:00",
      dateReserved: "2017-08-21T00:00:00",
      dateUpdated: "2024-08-05T18:58:10.671Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5