CVE-2017-13026

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-13026
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-13026.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-13026
Downstream
Related
Published
2017-09-14T06:29:02Z
Modified
2025-10-13T06:58:00.737217Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.

References

Affected packages

Git / github.com/the-tcpdump-group/tcpdump

Affected ranges

Type
GIT
Repo
https://github.com/the-tcpdump-group/tcpdump
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b20e1639dbac84b3fcb393858521c13ad47a9d70

Affected versions

tcpdump-3.*

tcpdump-3.5.1
tcpdump-3.6.1
tcpdump-3.7.1
tcpdump-3.8-bp

tcpdump-4.*

tcpdump-4.5.0
tcpdump-4.6.0
tcpdump-4.6.0-bp
tcpdump-4.7.0-bp
tcpdump-4.9.0-bp

Database specific 

{
    "vanir_signatures": [
        {
            "id": "CVE-2017-13026-39e904f0",
            "source": "https://github.com/the-tcpdump-group/tcpdump/commit/b20e1639dbac84b3fcb393858521c13ad47a9d70",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "digest": {
                "length": 2595.0,
                "function_hash": "25864194697234152390102819753792648992"
            },
            "target": {
                "file": "print-isoclns.c",
                "function": "isis_print_mt_capability_subtlv"
            }
        },
        {
            "id": "CVE-2017-13026-a9de494b",
            "source": "https://github.com/the-tcpdump-group/tcpdump/commit/b20e1639dbac84b3fcb393858521c13ad47a9d70",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "digest": {
                "length": 1994.0,
                "function_hash": "124003423342110175779392083126313169948"
            },
            "target": {
                "file": "print-isoclns.c",
                "function": "isis_print_mt_port_cap_subtlv"
            }
        },
        {
            "id": "CVE-2017-13026-dfca38bb",
            "source": "https://github.com/the-tcpdump-group/tcpdump/commit/b20e1639dbac84b3fcb393858521c13ad47a9d70",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "127190199921719513479520465953617257257",
                    "210069435916775258403101888348178321999",
                    "296042143337105689998759820040866278229",
                    "316221183175476160351350455837625815543",
                    "214057216158033640595235677807763072048",
                    "9772792205818488953152104150636390726",
                    "336960640809661007482608854085228400538",
                    "254850850927962970350125009120686986420",
                    "303158082907701333322668702902336803748",
                    "15759910400451539932521761834823935340",
                    "148750473565930596314896722399790428528",
                    "67129167222992523632293250325086256579",
                    "260531310773045303256401843046971790512",
                    "6463536529664186164024205562949722781",
                    "331792360114617310877076191004574815369",
                    "19575806156255957066124363278575099106",
                    "218300560677456800656683721770874927904",
                    "149162823171522781195623101989835150163",
                    "47660783279411917702718447105756485198",
                    "163846481103781554503437105153590597574",
                    "149632730543128030054364785021798086398",
                    "278430730349582942444564196221861908334",
                    "177352614473823209271112051885639198166",
                    "231176161426228114157426538907824540337",
                    "94513813759104666762842881438041164344",
                    "337932534989999462895497080535439074391",
                    "215610623773910452048423974654361564405",
                    "109274691938949294800231097760711051283",
                    "11440194145400312876605330323298995377",
                    "86641638254889369982859525389601801597",
                    "123890006887829624960676999719880033188",
                    "103636322666914484820422565664507865143",
                    "261165616218803672595005730472613996203",
                    "330048734140082341341104425196038564113",
                    "194018544671910943289741621752355400111",
                    "96169057650297514766903841905878883190",
                    "103298329085228962756679304270232384483",
                    "226422646962418002163160529281622315428",
                    "18109905741285251012175914807313051249",
                    "16005707821783007815482866254495297126",
                    "39302910621898167293865526273311332327",
                    "163365333947463192760216260292028193514",
                    "220874209762409506206246963739310088927",
                    "51124951514484930441462541067583068461",
                    "289706994965178380459040848280592145411",
                    "226349168921439104179362238953771886956",
                    "296042143337105689998759820040866278229",
                    "238888627684755009881872369594127192658",
                    "214057216158033640595235677807763072048",
                    "9772792205818488953152104150636390726",
                    "33869227203802164588011071513489856381",
                    "67887123929556866306095510220690608332",
                    "9557528804761320850742180125957418047",
                    "197185408678204589044146297787978200582",
                    "225492116918607489522348133594782997182",
                    "77956669151261769531974984898149801803",
                    "56336475691435769169069000701138796025",
                    "294246766464918591220959956653900398009",
                    "302615726303585843001330526070108399485",
                    "309836571399747923605516934712226151480",
                    "51306322863229051936345509983554598360",
                    "197289937838406889096153806020983930687",
                    "125118522068229089866659936087144094179",
                    "332528112269175734018777266642591931824",
                    "14799043247237734291952997188588375146",
                    "230505847897085237545998074409589204175",
                    "217271968593038181023021007183095178725",
                    "469507758691939335872763084144667842",
                    "256802715954552916976042374566190915598",
                    "197449326656641653866564272069772656689",
                    "208815418482110578702240025686331078934",
                    "273044645211350846033584871890401335473",
                    "163365333947463192760216260292028193514",
                    "220874209762409506206246963739310088927",
                    "51124951514484930441462541067583068461"
                ]
            },
            "target": {
                "file": "print-isoclns.c"
            }
        }
    ]
}