The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-13038.json"
[
{
"target": {
"function": "handle_mlppp",
"file": "print-ppp.c"
},
"id": "CVE-2017-13038-644b08e3",
"deprecated": false,
"signature_type": "Function",
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/7335163a6ef82d46ff18f3e6099a157747241629",
"signature_version": "v1",
"digest": {
"function_hash": "104475510614543381647945374694756825848",
"length": 309.0
}
},
{
"target": {
"file": "print-ppp.c"
},
"id": "CVE-2017-13038-ce0f6166",
"deprecated": false,
"signature_type": "Line",
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/7335163a6ef82d46ff18f3e6099a157747241629",
"signature_version": "v1",
"digest": {
"line_hashes": [
"207321312831272802920847581388257873641",
"113784297248733078625081073952188932860",
"125372704519316314067301538403105121868"
],
"threshold": 0.9
}
}
]