Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2017-5205 Details

The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print().

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://access.redhat.com/errata/RHSA-2017:1871	CVE	Third Party Advisory
https://security.gentoo.org/glsa/201702-30	CVE	Third Party Advisory
https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html	CVE
http://www.debian.org/security/2017/dsa-3775	CVE	Third Party Advisory
http://www.securityfocus.com/bid/95852	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1037755	CVE	Third Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2017:1871	[email protected]	Third Party Advisory
https://security.gentoo.org/glsa/201702-30	[email protected]	Third Party Advisory
https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html	[email protected]
http://www.debian.org/security/2017/dsa-3775	[email protected]	Third Party Advisory
http://www.securityfocus.com/bid/95852	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1037755	[email protected]	Third Party AdvisoryVDB Entry

CWE-ID	CWE Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	[email protected]

Product	Versions
tcpdump tcpdump	< 4.9.0
CPE cpe:2.3:a:tcpdump:tcpdump:::::::: Remediation No remediation found in references.
debian debian linux	8.0 9.0
CPE cpe:2.3:o:debian:debian_linux:8.0:::::::* cpe:2.3:o:debian:debian_linux:9.0:::::::* Remediation No remediation found in references.
redhat enterprise linux desktop	7.0
CPE cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::* Remediation No remediation found in references.
redhat enterprise linux server	7.0
CPE cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::* Remediation No remediation found in references.
redhat enterprise linux server aus	7.4 7.6
CPE cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:::::::* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:::::::* Remediation No remediation found in references.
redhat enterprise linux server eus	7.4 7.5 7.6
CPE cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:::::::* cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:::::::* cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:::::::* Remediation No remediation found in references.
redhat enterprise linux server tus	7.6
CPE cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:::::::* Remediation No remediation found in references.
redhat enterprise linux workstation	7.0
CPE cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::* Remediation No remediation found in references.

12 change records found show changes

QUICK INFO