CVE-2017-12901

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-12901
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-12901.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-12901
Downstream
Related
Published
2017-09-14T06:29:00Z
Modified
2025-10-15T08:45:18.381878Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().

References

Affected packages

Git / github.com/the-tcpdump-group/tcpdump

Affected ranges

Type
GIT
Repo
https://github.com/the-tcpdump-group/tcpdump
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
de981e6070d168b58ec1bb0713ded77ed4ad87f4

Affected versions

tcpdump-3.*

tcpdump-3.5.1
tcpdump-3.6.1
tcpdump-3.7.1
tcpdump-3.8-bp

tcpdump-4.*

tcpdump-4.5.0
tcpdump-4.6.0
tcpdump-4.6.0-bp
tcpdump-4.7.0-bp
tcpdump-4.9.0-bp

Database specific

vanir_signatures

[
    {
        "signature_version": "v1",
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/de981e6070d168b58ec1bb0713ded77ed4ad87f4",
        "signature_type": "Line",
        "target": {
            "file": "print-eigrp.c"
        },
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "136094331488378203660450643955065202616",
                "137610628347769018059134719958596265902",
                "142376509053351861367495599402650819168",
                "190917570449561712583497455134320981424",
                "319918198234028573688397254733542537853",
                "195637831449747531654603519289880797799",
                "261208407003532930681105949403399455484",
                "72266904106510889790586280608868754358",
                "51405618971553574655923259524980261454",
                "338511235263193139705669805605471122344",
                "134589787163251644243972689294931215656",
                "246640138069698938584628825744882057142",
                "251567797696915328994487266241142569461",
                "26618220922419308007677506333886573432",
                "257434247367489108020873817934390249349",
                "3778497845860536242300849331479659909",
                "321227267401805059482298091891187097499",
                "277970012968125119695218580359877737348",
                "200395748426880366691993847882955753466",
                "103383526833918025100853178761904545754",
                "120760986926590293230148116933196240723",
                "255093859094742948105025983710846146049",
                "99627349288790785745719733628983075128",
                "46710125186075103009865373914759237578",
                "317216096285985072869546969495377930115",
                "96259502433611158536579748401089692560",
                "147693873149616345342416568623627129944",
                "153461823184579182990318938089858388226",
                "216311726837792291345109254597676310226",
                "203294081924351336544738693743230499790",
                "308409690077556631371866407016868426525",
                "86676203214859693446891939735714167316",
                "116203434107663011436382862347372193551",
                "184423962366135940936384074028320121044",
                "265584997905340563180395441799115840611",
                "60199094680740512925543928165492568346",
                "274667258613587914551359680315808372362"
            ]
        },
        "id": "CVE-2017-12901-054f7774"
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/de981e6070d168b58ec1bb0713ded77ed4ad87f4",
        "signature_type": "Function",
        "target": {
            "function": "eigrp_print",
            "file": "print-eigrp.c"
        },
        "deprecated": false,
        "digest": {
            "length": 8113.0,
            "function_hash": "306860893952261100920226753065916945598"
        },
        "id": "CVE-2017-12901-818c8059"
    }
]