CVE-2017-13029

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-13029
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-13029.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-13029
Downstream
Related
Published
2017-09-14T06:29:02Z
Modified
2025-09-16T06:40:00.858809Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:printccpconfig_options().

References

Affected packages

Debian:11 / tcpdump

Package

Name
tcpdump
Purl
pkg:deb/debian/tcpdump?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.9.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / tcpdump

Package

Name
tcpdump
Purl
pkg:deb/debian/tcpdump?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.9.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / tcpdump

Package

Name
tcpdump
Purl
pkg:deb/debian/tcpdump?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.9.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:14 / tcpdump

Package

Name
tcpdump
Purl
pkg:deb/debian/tcpdump?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.9.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/the-tcpdump-group/tcpdump

Affected ranges

Type
GIT
Repo
https://github.com/the-tcpdump-group/tcpdump
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
7029d15f148ef24bb7c6668bc640f5470d085e5a

Affected versions

tcpdump-3.*

tcpdump-3.5.1
tcpdump-3.6.1
tcpdump-3.7.1
tcpdump-3.8-bp

tcpdump-4.*

tcpdump-4.5.0
tcpdump-4.6.0
tcpdump-4.6.0-bp
tcpdump-4.7.0-bp
tcpdump-4.9.0-bp

Database specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "function_hash": "245744078322262594835914705229953483767",
                "length": 1057.0
            },
            "deprecated": false,
            "signature_version": "v1",
            "source": "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
            "signature_type": "Function",
            "id": "CVE-2017-13029-21854a0f",
            "target": {
                "function": "print_bacp_config_options",
                "file": "print-ppp.c"
            }
        },
        {
            "digest": {
                "function_hash": "146282207689112759739470610230975685680",
                "length": 2093.0
            },
            "deprecated": false,
            "signature_version": "v1",
            "source": "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
            "signature_type": "Function",
            "id": "CVE-2017-13029-23fd24ea",
            "target": {
                "function": "print_ccp_config_options",
                "file": "print-ppp.c"
            }
        },
        {
            "digest": {
                "line_hashes": [
                    "70367357606021279317669969812466942119",
                    "191173592660328653816113736546130357464",
                    "329866653308750598437651304068307417193",
                    "197758990803960536514411176723962253780",
                    "44910569013634196726728136903395670233",
                    "15889332058126615762851613018215022549",
                    "93619196673116691137653064853633910105",
                    "327810609591263424617229152481497505703",
                    "179894599585755610117764268843052812370",
                    "43240027996855975298222249595658577577",
                    "211974754333762831143020356953778226331",
                    "77127712409588425522702499556830919095",
                    "339828317384696112101174200307070960536",
                    "281114827767978226538236662381675688386",
                    "24086487498821263942467273809492643003",
                    "19400792127836125101386874814712971983",
                    "263660732183012629647056907878414744621",
                    "12797384730588297119815733103346640150",
                    "49048907870727599656292845282921304796",
                    "149203156964583059437957835147343055680",
                    "189266271324232903825713916497041019351",
                    "179593528343253235752528541080265172808",
                    "211974754333762831143020356953778226331",
                    "114285739849297130518361525746480277725",
                    "138393015028123743905730789927272703778",
                    "69838006890516451866728317779588775629",
                    "37449434976653051242575389628774523645",
                    "185767489289945050943710765054810000395",
                    "138393015028123743905730789927272703778",
                    "29555577630650314251612140238387767490",
                    "93619196673116691137653064853633910105",
                    "111777654954571743287192869500202002157",
                    "263660732183012629647056907878414744621",
                    "66018071675964062153022334328680864186",
                    "297132653585994770196926240221344107034",
                    "179549764329939049742455797110639432544",
                    "178149563465948707296348169918478678288",
                    "307933310756150861857774020678537424491",
                    "247240817552015661396256057121130949231",
                    "37704175051320874692915419501864818431",
                    "26216882396213305216377404884625478384",
                    "1479275613326173402330268620034784722",
                    "222674041308933714560812669595205222893",
                    "108095810920716570892112711270336953227",
                    "26216882396213305216377404884625478384",
                    "252212323614026542532545085769250140413",
                    "210813698554188179060722822963233738199",
                    "75220450228624073644579414898954090579",
                    "179894599585755610117764268843052812370",
                    "243807421321944350406547413331459023858",
                    "237083131549658857135809433830117212513",
                    "253568413315722654294522940179243617439"
                ],
                "threshold": 0.9
            },
            "deprecated": false,
            "signature_version": "v1",
            "source": "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
            "signature_type": "Line",
            "id": "CVE-2017-13029-30e1351f",
            "target": {
                "file": "print-ppp.c"
            }
        },
        {
            "digest": {
                "function_hash": "261245867450440574275710384610460527176",
                "length": 5258.0
            },
            "deprecated": false,
            "signature_version": "v1",
            "source": "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
            "signature_type": "Function",
            "id": "CVE-2017-13029-6c3e292f",
            "target": {
                "function": "print_lcp_config_options",
                "file": "print-ppp.c"
            }
        },
        {
            "digest": {
                "function_hash": "15514114099264362975027729879385611567",
                "length": 2742.0
            },
            "deprecated": false,
            "signature_version": "v1",
            "source": "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
            "signature_type": "Function",
            "id": "CVE-2017-13029-e2940345",
            "target": {
                "function": "print_ipcp_config_options",
                "file": "print-ppp.c"
            }
        }
    ]
}