CVE-2017-13048

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-13048
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-13048.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-13048
Downstream
Related
Published
2017-09-14T06:29:02Z
Modified
2025-10-15T08:45:35.797479Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint().

References

Affected packages

Git / github.com/the-tcpdump-group/tcpdump

Affected ranges

Type
GIT
Repo
https://github.com/the-tcpdump-group/tcpdump
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
3c8a2b0e91d8d8947e89384dacf6b54673083e71

Affected versions

tcpdump-3.*

tcpdump-3.5.1
tcpdump-3.6.1
tcpdump-3.7.1
tcpdump-3.8-bp

tcpdump-4.*

tcpdump-4.5.0
tcpdump-4.6.0
tcpdump-4.6.0-bp
tcpdump-4.7.0-bp
tcpdump-4.9.0-bp

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "id": "CVE-2017-13048-00870dd2",
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/3c8a2b0e91d8d8947e89384dacf6b54673083e71",
        "signature_version": "v1",
        "target": {
            "file": "print-rsvp.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "22994545307458754897656994626798492330",
                "81531820141345505351803782676703679312",
                "133030223157259475624667370966486060332",
                "284899678299805981740848181706040216358",
                "161308908561062195879480074122342780251",
                "239878996824050096843939914516409043463",
                "217788417089968050885773672079123825797",
                "123989153505506524120288153715310109819",
                "67260305669864238385748467727135085763",
                "149622137367389187230432752509684869525",
                "48530845722354430662255471007717115283",
                "123989153505506524120288153715310109819"
            ]
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2017-13048-e0a6b25c",
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/3c8a2b0e91d8d8947e89384dacf6b54673083e71",
        "signature_version": "v1",
        "target": {
            "function": "rsvp_obj_print",
            "file": "print-rsvp.c"
        },
        "digest": {
            "function_hash": "11491070767884574435411471743345952492",
            "length": 24576.0
        },
        "deprecated": false
    }
]