CVE-2017-13029

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-13029
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-13029.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-13029
Downstream
Related
Published
2017-09-14T06:29:02.327Z
Modified
2025-11-14T05:02:00.628678Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:printccpconfig_options().

References

Affected packages

Git / github.com/the-tcpdump-group/tcpdump

Affected ranges

Type
GIT
Repo
https://github.com/the-tcpdump-group/tcpdump
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
7029d15f148ef24bb7c6668bc640f5470d085e5a

Affected versions

tcpdump-3.*

tcpdump-3.5.1
tcpdump-3.6.1
tcpdump-3.7.1
tcpdump-3.8-bp

tcpdump-4.*

tcpdump-4.5.0
tcpdump-4.6.0
tcpdump-4.6.0-bp
tcpdump-4.7.0-bp
tcpdump-4.9.0-bp

Database specific

vanir_signatures

[
    {
        "digest": {
            "function_hash": "245744078322262594835914705229953483767",
            "length": 1057.0
        },
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2017-13029-21854a0f",
        "target": {
            "function": "print_bacp_config_options",
            "file": "print-ppp.c"
        }
    },
    {
        "digest": {
            "function_hash": "146282207689112759739470610230975685680",
            "length": 2093.0
        },
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2017-13029-23fd24ea",
        "target": {
            "function": "print_ccp_config_options",
            "file": "print-ppp.c"
        }
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "70367357606021279317669969812466942119",
                "191173592660328653816113736546130357464",
                "329866653308750598437651304068307417193",
                "197758990803960536514411176723962253780",
                "44910569013634196726728136903395670233",
                "15889332058126615762851613018215022549",
                "93619196673116691137653064853633910105",
                "327810609591263424617229152481497505703",
                "179894599585755610117764268843052812370",
                "43240027996855975298222249595658577577",
                "211974754333762831143020356953778226331",
                "77127712409588425522702499556830919095",
                "339828317384696112101174200307070960536",
                "281114827767978226538236662381675688386",
                "24086487498821263942467273809492643003",
                "19400792127836125101386874814712971983",
                "263660732183012629647056907878414744621",
                "12797384730588297119815733103346640150",
                "49048907870727599656292845282921304796",
                "149203156964583059437957835147343055680",
                "189266271324232903825713916497041019351",
                "179593528343253235752528541080265172808",
                "211974754333762831143020356953778226331",
                "114285739849297130518361525746480277725",
                "138393015028123743905730789927272703778",
                "69838006890516451866728317779588775629",
                "37449434976653051242575389628774523645",
                "185767489289945050943710765054810000395",
                "138393015028123743905730789927272703778",
                "29555577630650314251612140238387767490",
                "93619196673116691137653064853633910105",
                "111777654954571743287192869500202002157",
                "263660732183012629647056907878414744621",
                "66018071675964062153022334328680864186",
                "297132653585994770196926240221344107034",
                "179549764329939049742455797110639432544",
                "178149563465948707296348169918478678288",
                "307933310756150861857774020678537424491",
                "247240817552015661396256057121130949231",
                "37704175051320874692915419501864818431",
                "26216882396213305216377404884625478384",
                "1479275613326173402330268620034784722",
                "222674041308933714560812669595205222893",
                "108095810920716570892112711270336953227",
                "26216882396213305216377404884625478384",
                "252212323614026542532545085769250140413",
                "210813698554188179060722822963233738199",
                "75220450228624073644579414898954090579",
                "179894599585755610117764268843052812370",
                "243807421321944350406547413331459023858",
                "237083131549658857135809433830117212513",
                "253568413315722654294522940179243617439"
            ]
        },
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "id": "CVE-2017-13029-30e1351f",
        "target": {
            "file": "print-ppp.c"
        }
    },
    {
        "digest": {
            "function_hash": "261245867450440574275710384610460527176",
            "length": 5258.0
        },
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2017-13029-6c3e292f",
        "target": {
            "function": "print_lcp_config_options",
            "file": "print-ppp.c"
        }
    },
    {
        "digest": {
            "function_hash": "15514114099264362975027729879385611567",
            "length": 2742.0
        },
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/7029d15f148ef24bb7c6668bc640f5470d085e5a",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2017-13029-e2940345",
        "target": {
            "function": "print_ipcp_config_options",
            "file": "print-ppp.c"
        }
    }
]