CWE-125
Out-of-bounds Read
Description
The product reads data past the end, or before the beginning, of the intended buffer.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-540
CVEs mapped to this weakness (9,795)
page 14 of 490| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2017-13050 | Cri | 0.64 | 9.8 | 0.05 | Sep 14, 2017 | The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print(). | ||
| CVE-2017-13049 | Cri | 0.64 | 9.8 | 0.03 | Sep 14, 2017 | The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print(). | ||
| CVE-2017-13048 | Cri | 0.64 | 9.8 | 0.03 | Sep 14, 2017 | The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). | ||
| CVE-2017-13047 | Cri | 0.64 | 9.8 | 0.03 | Sep 14, 2017 | The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print(). | ||
| CVE-2017-13046 | Cri | 0.64 | 9.8 | 0.03 | Sep 14, 2017 | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). | ||
| CVE-2017-13045 | Cri | 0.64 | 9.8 | 0.03 | Sep 14, 2017 | The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print(). | ||
| CVE-2017-13044 | Cri | 0.64 | 9.8 | 0.03 | Sep 14, 2017 | The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print(). | ||
| CVE-2017-13043 | Cri | 0.64 | 9.8 | 0.03 | Sep 14, 2017 | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn(). | ||
| CVE-2017-13042 | Cri | 0.64 | 9.8 | 0.03 | Sep 14, 2017 | The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print(). | ||
| CVE-2017-13041 | Cri | 0.64 | 9.8 | 0.05 | Sep 14, 2017 | The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print(). | ||
| CVE-2017-13040 | Cri | 0.64 | 9.8 | 0.05 | Sep 14, 2017 | The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions. | ||
| CVE-2017-13039 | Cri | 0.64 | 9.8 | 0.03 | Sep 14, 2017 | The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. | ||
| CVE-2017-13038 | Cri | 0.64 | 9.8 | 0.04 | Sep 14, 2017 | The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp(). | ||
| CVE-2017-13037 | Cri | 0.64 | 9.8 | 0.03 | Sep 14, 2017 | The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts(). | ||
| CVE-2017-13036 | Cri | 0.64 | 9.8 | 0.03 | Sep 14, 2017 | The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3(). | ||
| CVE-2017-13035 | Cri | 0.64 | 9.8 | 0.03 | Sep 14, 2017 | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id(). | ||
| CVE-2017-13034 | Cri | 0.64 | 9.8 | 0.03 | Sep 14, 2017 | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). | ||
| CVE-2017-13033 | Cri | 0.64 | 9.8 | 0.04 | Sep 14, 2017 | The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print(). | ||
| CVE-2017-13032 | Cri | 0.64 | 9.8 | 0.03 | Sep 14, 2017 | The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string(). | ||
| CVE-2017-13031 | Cri | 0.64 | 9.8 | 0.03 | Sep 14, 2017 | The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print(). |
- risk 0.64cvss 9.8epss 0.05
The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().
- risk 0.64cvss 9.8epss 0.03
The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().
- risk 0.64cvss 9.8epss 0.03
The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
- risk 0.64cvss 9.8epss 0.03
The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().
- risk 0.64cvss 9.8epss 0.03
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
- risk 0.64cvss 9.8epss 0.03
The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().
- risk 0.64cvss 9.8epss 0.03
The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().
- risk 0.64cvss 9.8epss 0.03
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().
- risk 0.64cvss 9.8epss 0.03
The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().
- risk 0.64cvss 9.8epss 0.05
The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().
- risk 0.64cvss 9.8epss 0.05
The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.
- risk 0.64cvss 9.8epss 0.03
The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.
- risk 0.64cvss 9.8epss 0.04
The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().
- risk 0.64cvss 9.8epss 0.03
The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().
- risk 0.64cvss 9.8epss 0.03
The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().
- risk 0.64cvss 9.8epss 0.03
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().
- risk 0.64cvss 9.8epss 0.03
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
- risk 0.64cvss 9.8epss 0.04
The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().
- risk 0.64cvss 9.8epss 0.03
The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().
- risk 0.64cvss 9.8epss 0.03
The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().