The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"129884915112223636394291839914905697279",
"103728220197818645491124022920638441730",
"281517653315039165601416401218778275511",
"166329818523388236154825277149649671971"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/26a6799b9ca80508c05cac7a9a3bef922991520b",
"id": "CVE-2017-13018-543811f0",
"signature_version": "v1",
"target": {
"file": "print-pgm.c"
}
},
{
"digest": {
"function_hash": "165570078923940552169567020910237294225",
"length": 14409.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/26a6799b9ca80508c05cac7a9a3bef922991520b",
"id": "CVE-2017-13018-c1a7b64d",
"signature_version": "v1",
"target": {
"function": "pgm_print",
"file": "print-pgm.c"
}
}
]