Vulnerabilities (CVE)

Filtered by CWE-125
Total 8676 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-12996 1 Tcpdump 1 Tcpdump 2026-06-17 7.5 HIGH 9.8 CRITICAL
The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().
CVE-2017-12995 1 Tcpdump 1 Tcpdump 2026-06-17 5.0 MEDIUM 9.8 CRITICAL
The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().
CVE-2017-12994 1 Tcpdump 1 Tcpdump 2026-06-17 7.5 HIGH 9.8 CRITICAL
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
CVE-2017-12993 1 Tcpdump 1 Tcpdump 2026-06-17 7.5 HIGH 9.8 CRITICAL
The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.
CVE-2017-12992 1 Tcpdump 1 Tcpdump 2026-06-17 7.5 HIGH 9.8 CRITICAL
The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().
CVE-2017-12991 1 Tcpdump 1 Tcpdump 2026-06-17 7.5 HIGH 9.8 CRITICAL
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
CVE-2017-12990 1 Tcpdump 1 Tcpdump 2026-06-17 5.0 MEDIUM 9.8 CRITICAL
The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.
CVE-2017-12988 1 Tcpdump 1 Tcpdump 2026-06-17 7.5 HIGH 9.8 CRITICAL
The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().
CVE-2017-12987 3 Debian, Redhat, Tcpdump 5 Debian Linux, Enterprise Linux Desktop, Enterprise Linux Server and 2 more 2026-06-17 7.5 HIGH 9.8 CRITICAL
The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
CVE-2017-12986 1 Tcpdump 1 Tcpdump 2026-06-17 7.5 HIGH 9.8 CRITICAL
The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().
CVE-2017-12985 1 Tcpdump 1 Tcpdump 2026-06-17 7.5 HIGH 9.8 CRITICAL
The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().
CVE-2017-12967 1 Gnu 1 Binutils 2026-06-17 4.3 MEDIUM 6.5 MEDIUM
The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a malformed tekhex binary.
CVE-2017-12963 1 Libsass 1 Libsass 2026-06-17 5.0 MEDIUM 7.5 HIGH
There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to CVE-2017-11555 but remains exploitable after the vendor's CVE-2017-11555 fix (available from GitHub after 2017-07-24).
CVE-2017-12958 1 Gnu 1 Pspp 2026-06-17 5.0 MEDIUM 7.5 HIGH
There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.
CVE-2017-12957 1 Exiv2 1 Exiv2 2026-06-17 4.3 MEDIUM 6.5 MEDIUM
There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service.
CVE-2017-12956 1 Exiv2 1 Exiv2 2026-06-17 4.3 MEDIUM 6.5 MEDIUM
There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service.
CVE-2017-12954 1 Libgig0 1 Libgig 2026-06-17 4.3 MEDIUM 6.5 MEDIUM
The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted gig file.
CVE-2017-12951 1 Libgig0 1 Libgig 2026-06-17 4.3 MEDIUM 6.5 MEDIUM
The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted gig file.
CVE-2017-12941 1 Rarlab 1 Unrar 2026-06-17 7.5 HIGH 9.8 CRITICAL
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.
CVE-2017-12940 1 Rarlab 1 Unrar 2026-06-17 7.5 HIGH 9.8 CRITICAL
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.