CVE-2017-12995

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-12995
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12995.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-12995
Downstream
Related
Published
2017-09-14T06:29:00Z
Modified
2025-10-21T04:10:33.440381Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().

References

Affected packages

Git / github.com/the-tcpdump-group/tcpdump

Affected ranges

Type
GIT
Repo
https://github.com/the-tcpdump-group/tcpdump
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
3a76fd7c95fced2c2f8c8148a9055c3a542eff29

Affected versions

tcpdump-3.*

tcpdump-3.5.1
tcpdump-3.6.1
tcpdump-3.7.1
tcpdump-3.8-bp

tcpdump-4.*

tcpdump-4.5.0
tcpdump-4.6.0
tcpdump-4.6.0-bp
tcpdump-4.7.0-bp
tcpdump-4.9.0-bp

Database specific

vanir_signatures

[
    {
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/3a76fd7c95fced2c2f8c8148a9055c3a542eff29",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "186523901139974695757499412785972536238",
                "81902134392199983219004731208962365047",
                "314792974199914986604531919821724129602",
                "112641495530610653752369289520807752174",
                "118623813490315879183866470101674143161",
                "50624683111763494804016927956065108139",
                "254655054212559804634098122197348317768",
                "337322039747238142822227824017127063143",
                "317975490280134030861394093961638140407",
                "11187133106110759441359645385947511679",
                "311184410365909173804145921070382696917",
                "204054733204850947111064801227810699581",
                "262727745599338489467671187552993824269",
                "25659142467271311192455819213184233299",
                "146635366305186421807158221960380407797",
                "254655054212559804634098122197348317768",
                "170215455597743731874390154421120766382",
                "150181804222924439899818738266010931734",
                "73476725149873235205081854371654562824",
                "177586576821859783585873896303736208483",
                "122423369543425930432575421760294308269",
                "312634792135388215771667509369268054076",
                "296896244661693425618441660550708209452",
                "207012748358424391116036392383873335757",
                "32082122679461856249889343425595973474",
                "116904376629567193130296422749487545053",
                "214307034127674026378127712790918695792",
                "234079322587035646666490442390255484294",
                "242211844960224333698716253849255833653",
                "4077039079191093459536649579387741996",
                "254655054212559804634098122197348317768",
                "170215455597743731874390154421120766382",
                "150181804222924439899818738266010931734",
                "197209394889814443606383461933635437387",
                "12266340197541142369835894221158557156",
                "108416767134863025886920785955592270195"
            ]
        },
        "target": {
            "file": "print-domain.c"
        },
        "id": "CVE-2017-12995-6657371c",
        "signature_version": "v1",
        "signature_type": "Line"
    },
    {
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/3a76fd7c95fced2c2f8c8148a9055c3a542eff29",
        "deprecated": false,
        "digest": {
            "function_hash": "43430048188445635112347222465899490996",
            "length": 1660.0
        },
        "target": {
            "function": "ns_nprint",
            "file": "print-domain.c"
        },
        "id": "CVE-2017-12995-deb48fd3",
        "signature_version": "v1",
        "signature_type": "Function"
    }
]