The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgpattrprint().
[
{
"id": "CVE-2017-12991-b7f23f44",
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/50a44b6b8e4f7c127440dbd4239cf571945cc1e7",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 25611.0,
"function_hash": "295029212132483183672697495560089077830"
},
"target": {
"function": "bgp_attr_print",
"file": "print-bgp.c"
}
},
{
"id": "CVE-2017-12991-f7d24c74",
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/50a44b6b8e4f7c127440dbd4239cf571945cc1e7",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"245773694374329174082484162818803088766",
"154274373918990530425658208715935972111",
"304340865847970542887382131320071485886",
"193321284312544786882466386329179784354"
]
},
"target": {
"file": "print-bgp.c"
}
}
]