CVE-2016-7940 — Tcpdump Tcpdump: The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple
The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions. CVSSv3.1 9.8 (CRITICAL)
The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions. CVSSv3.1 9.8 (CRITICAL)
The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions. CVSSv3.1 9.8 (CRITICAL)
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1_print_frame(). CVSSv3.1 9.8 (CRITICAL)
The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print(). CVSSv3.1 9.8 (CRITICAL)
The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_print(). CVSSv3.1 9.8 (CRITICAL)
The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp_print(). CVSSv3.1 9.8 (CRITICAL)
The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcp_print(). CVSSv3.1 9.8 (CRITICAL)
The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print(). CVSSv3.1 9.8 (CRITICAL)
The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum(). CVSSv3.1 9.8 (CRITICAL)
The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print(). CVSSv3.1 9.8 (CRITICAL)
The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print(). CVSSv3.1 9.8 (CRITICAL)
The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper_parse_header(). CVSSv3.1 9.8 (CRITICAL)
The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print(). CVSSv3.1 9.8 (CRITICAL)
The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print(). CVSSv3.1 9.8 (CRITICAL)
The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertype_print(). CVSSv3.1 9.8 (CRITICAL)
The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl_if_print(). CVSSv3.1 9.8 (CRITICAL)
The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print(). CVSSv3.1 9.8 (CRITICAL)
The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print(). CVSSv3.1 9.8 (CRITICAL)
The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print(). CVSSv3.1 9.8 (CRITICAL)
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Com CVSSv3.1 8.2 (HIGH)
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Interact CVSSv3.1 8.2 (HIGH)
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Interact CVSSv3.1 8.2 (HIGH)
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Interact CVSSv3.1 8.2 (HIGH)
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Orac CVSSv3.1 8.2 (HIGH)
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Orac CVSSv3.1 8.2 (HIGH)