The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintid().
[
{
"id": "CVE-2017-13035-8360ab08",
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/571a6f33f47e7a2394fa08f925e534135c29cf1e",
"signature_version": "v1",
"target": {
"function": "isis_print_id",
"file": "print-isoclns.c"
},
"deprecated": false,
"digest": {
"length": 600.0,
"function_hash": "29124096331955878928480718109774069627"
},
"signature_type": "Function"
},
{
"id": "CVE-2017-13035-bf20f9ac",
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/571a6f33f47e7a2394fa08f925e534135c29cf1e",
"signature_version": "v1",
"target": {
"file": "print-isoclns.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"318702498595438592512807409073883146692",
"102689435166337162394667688315711273158",
"13847154078745266308227980517560407190",
"174705587854763018908741682831761683151",
"172017160379834111182624976681632486330"
],
"threshold": 0.9
},
"signature_type": "Line"
}
]