CVE-2017-13039

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-13039
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-13039.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-13039
Downstream
Related
Published
2017-09-14T06:29:02Z
Modified
2025-10-15T08:45:34.712529Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.

References

Affected packages

Git / github.com/the-tcpdump-group/tcpdump

Affected ranges

Type
GIT
Repo
https://github.com/the-tcpdump-group/tcpdump
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d

Affected versions

tcpdump-3.*

tcpdump-3.5.1
tcpdump-3.6.1
tcpdump-3.7.1
tcpdump-3.8-bp

tcpdump-4.*

tcpdump-4.5.0
tcpdump-4.6.0
tcpdump-4.6.0-bp
tcpdump-4.7.0-bp
tcpdump-4.9.0-bp

Database specific

vanir_signatures

[
    {
        "signature_version": "v1",
        "digest": {
            "function_hash": "224391851443219811082086096763818272586",
            "length": 768.0
        },
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d",
        "signature_type": "Function",
        "target": {
            "function": "ikev1_attr_print",
            "file": "print-isakmp.c"
        },
        "deprecated": false,
        "id": "CVE-2017-13039-19858b0b"
    },
    {
        "signature_version": "v1",
        "digest": {
            "function_hash": "312142484230673655386386597708511438770",
            "length": 1701.0
        },
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d",
        "signature_type": "Function",
        "target": {
            "function": "ikev1_t_print",
            "file": "print-isakmp.c"
        },
        "deprecated": false,
        "id": "CVE-2017-13039-5b934dc8"
    },
    {
        "signature_version": "v1",
        "digest": {
            "function_hash": "189758025507700063010500922484976508751",
            "length": 1105.0
        },
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d",
        "signature_type": "Function",
        "target": {
            "function": "ikev1_attrmap_print",
            "file": "print-isakmp.c"
        },
        "deprecated": false,
        "id": "CVE-2017-13039-61881942"
    },
    {
        "signature_version": "v1",
        "digest": {
            "function_hash": "241780913660678405657776935643926993404",
            "length": 4308.0
        },
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d",
        "signature_type": "Function",
        "target": {
            "function": "ikev1_n_print",
            "file": "print-isakmp.c"
        },
        "deprecated": false,
        "id": "CVE-2017-13039-66cad6ee"
    },
    {
        "signature_version": "v1",
        "digest": {
            "function_hash": "323000904602062630223812049619870840299",
            "length": 1616.0
        },
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d",
        "signature_type": "Function",
        "target": {
            "function": "ikev2_t_print",
            "file": "print-isakmp.c"
        },
        "deprecated": false,
        "id": "CVE-2017-13039-b003ab5f"
    },
    {
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "20626677014629214071495485440344307998",
                "331790872994650490802022602907852061488",
                "273335324220526955219179324316838991015",
                "186151974592412856535851628549426431837",
                "273993949045185580901851216415477574203",
                "169403004813666168255875512203381233033",
                "142370433514095922786659944820755157150",
                "232212673173496754987250566255953374699",
                "97496797477369510150317378414540491515",
                "153772200450374883778390232279909719224",
                "297118495564144347197315667786167790502",
                "202612294792834499589737171538276812478",
                "104168145775123740761061441993715556871",
                "104860182811461733580078775777959267082",
                "134252326896599868941259995356716388655",
                "1853046157595131728417256599709725406",
                "254428137138544373423029412520894988289",
                "325881904904884363561444164496793083083",
                "48733999776900934846994513490980526972",
                "174687769863673365972483103485572623281",
                "216932017518905914947123378945388170489",
                "274617866799908898411282506651426787407",
                "136028798170095129594645436338591292762",
                "339743098822412697802817732810005835056",
                "266269102710318083728317413788722910319",
                "321483475798846368478913218505705935868",
                "238271384759741211144236999226097279698",
                "34482695416575831144265971183672626556",
                "231597030222055917447569124552101184244",
                "177988419385459663471356759828101835281",
                "309067964966666719643233892772424499984",
                "324092973781808207087219780625406828032",
                "141933749472876824918347076772496047111",
                "299687662501686118080916274690709672460",
                "25928827822595752737539432040489820396",
                "101158528412636453514559638825239783130",
                "48769492350218450087682625180659606119",
                "97496797477369510150317378414540491515",
                "153772200450374883778390232279909719224",
                "297118495564144347197315667786167790502",
                "202612294792834499589737171538276812478",
                "104168145775123740761061441993715556871",
                "104860182811461733580078775777959267082",
                "134252326896599868941259995356716388655",
                "170926362807589682146687742055905703945",
                "103512732611198977652092351386416689872",
                "87341862661062190259438025176381369072",
                "220745158525973940863004379546833396203",
                "115258174205574787647929006908182485431",
                "9898143534388090706145502044150264222",
                "111443593748593373108160937527277006202",
                "266269102710318083728317413788722910319",
                "321483475798846368478913218505705935868",
                "238271384759741211144236999226097279698",
                "34482695416575831144265971183672626556",
                "231597030222055917447569124552101184244",
                "177988419385459663471356759828101835281",
                "113274968287191189117278219291443426833",
                "103780475132905170770439852154836974419",
                "299497188651628565505770463259875624718",
                "180573121368563107884781029392162189625",
                "61512361771213567889544937665506195940",
                "169520048829948692909037180447419225338",
                "318938018202471665219730316462539390751",
                "265119689157827092082352066002032705404",
                "263099850446143421416913158543172427569",
                "67869046396819355686182708867591250745",
                "165285378143747096266536037316854575856",
                "171401995158303400488483894450341317334",
                "221849145091686396081279548081063323697",
                "126093272220882510834726197112684250521",
                "299497188651628565505770463259875624718",
                "180573121368563107884781029392162189625",
                "61512361771213567889544937665506195940",
                "169520048829948692909037180447419225338",
                "318938018202471665219730316462539390751",
                "265119689157827092082352066002032705404",
                "263099850446143421416913158543172427569"
            ]
        },
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d",
        "signature_type": "Line",
        "target": {
            "file": "print-isakmp.c"
        },
        "deprecated": false,
        "id": "CVE-2017-13039-e0f3c586"
    }
]