1. CVE-Search
  2. CVE-2017-12989
ID CVE-2017-12989
Summary The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().
References
Vulnerable Configurations
  • cpe:2.3:a:tcpdump:tcpdump:3.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.8.2:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.8.3:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.8.3:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.9.5:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.9.5:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.9.6:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.9.6:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.9.7:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.9.7:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:3.9.8:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:3.9.8:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.7.3:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.7.4:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.7.4:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:tcpdump:tcpdump:4.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:tcpdump:tcpdump:4.9.1:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 03-10-2019 - 00:03)
Impact:
Exploitability:
CWE CWE-835
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
redhat via4
advisories
rhsa
id RHEA-2018:0705
rpms
  • tcpdump-14:4.9.2-3.el7
  • tcpdump-debuginfo-14:4.9.2-3.el7
refmap via4
confirm
debian DSA-3971
gentoo GLSA-201709-23
sectrack 1039307
Last major update 03-10-2019 - 00:03
Published 14-09-2017 - 06:29
Last modified 03-10-2019 - 00:03
Back to Top