]> The Tcpdump Group git mirrors - tcpdump/commit
projects / tcpdump / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: 7ac73d6) | patch
CVE-2017-12901/EIGRP: Do more length checks.
authorGuy Harris <[email protected]>
Sat, 4 Feb 2017 23:33:12 +0000 (15:33 -0800)
committerDenis Ovsienko <[email protected]>
Wed, 13 Sep 2017 11:25:44 +0000 (12:25 +0100)
commitde981e6070d168b58ec1bb0713ded77ed4ad87f4
tree7d62ebf31135108a32ddbb7859982e6cf493d9fdtree
parent7ac73d6cd41e9d4ac0ca7e6830ca390e195bb21ccommit | diff
CVE-2017-12901/EIGRP: Do more length checks.

This fixes a buffer over-read discovered by Forcepoint's security
researchers Otto Airamo & Antti Levomäki.

Add a test using the capture file supplied by the reporter(s).
print-eigrp.c diff | blob | history
tests/TESTLIST diff | blob | history
tests/eigrp-tlv-oobr.out [new file with mode: 0644] blob
tests/eigrp-tlv-oobr.pcap [new file with mode: 0644] blob
[mirror] the TCPdump network dissector