Wang Junjie

**Name of the Vulnerable Software and Affected Versions** tcpdump versions prior to 4.9.3 **Description** The issue is related to a buffer over-read in the ICMPv6 parser of the tcpdump utility, which can lead to a denial of service. This can be exploited by a remote attacker. The buffer over-read is located in print-icmp6.c. Additionally, there is a heap-based buffer over-read related to aoe print in print-aoe.c and lookup emem in addrtoname.c. **Recommendations** For versions prior to 4.9.3, update to version 4.9.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the ICMPv6 parser and the affected functions `aoe print` and `lookup emem` until a patch is available.

**Name of the Vulnerable Software and Affected Versions** tcpdump versions prior to 4.9.3 **Description** The issue is related to a buffer over-read in the OSPFv3 parser, specifically in the `ospf6 print lshdr()` function in `print-ospf6.c`. This can be exploited by a remote attacker to cause a denial of service. The problem is also associated with a heap-based buffer over-read related to `aoe print` in `print-aoe.c` and `lookup emem` in `addrtoname.c`. **Recommendations** For versions prior to 4.9.3, update to version 4.9.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the `ospf6 print lshdr()` function until a patch is available. Additionally, be cautious when using the `aoe print` and `lookup emem` functions in `print-aoe.c` and `addrtoname.c`, respectively, to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** tcpdump versions prior to 4.9.3 **Description** The issue is related to a buffer over-read in the HNCP parser of the tcpdump utility, specifically in the print-hncp.c:print prefix() function. This can be exploited by a remote attacker to cause a denial of service. The vulnerability is also related to a heap-based buffer over-read in the aoe print function in print-aoe.c and the lookup emem function in addrtoname.c. **Recommendations** For versions prior to 4.9.3, update to version 4.9.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the HNCP parser and the affected functions until a patch is available. Avoid using the `print-hncp.c:print prefix()` function and the `aoe print` function in `print-aoe.c` until the issue is resolved. Restrict access to the `lookup emem` function in `addrtoname.c` to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 11 Safari versions prior to 11 iCloud versions prior to 7.0 on Windows iTunes versions prior to 12.7 on Windows tvOS versions prior to 11 **Description** The issue involves the WebKit component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. **Recommendations** For iOS versions prior to 11, update to version 11 or later. For Safari versions prior to 11, update to version 11 or later. For iCloud versions prior to 7.0 on Windows, update to version 7.0 or later. For iTunes versions prior to 12.7 on Windows, update to version 12.7 or later. For tvOS versions prior to 11, update to version 11 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 11 Safari versions prior to 11 iCloud versions prior to 7.0 on Windows iTunes versions prior to 12.7 on Windows tvOS versions prior to 11 **Description** The issue involves the WebKit component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. **Recommendations** For iOS versions prior to 11, update to version 11 or later. For Safari versions prior to 11, update to version 11 or later. For iCloud versions prior to 7.0 on Windows, update to version 7.0 or later. For iTunes versions prior to 12.7 on Windows, update to version 12.7 or later. For tvOS versions prior to 11, update to version 11 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 11 Apple Safari versions prior to 11 Apple iCloud versions prior to 7.0 on Windows Apple iTunes versions prior to 12.7 on Windows Apple tvOS versions prior to 11 **Description** The issue involves the WebKit component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. **Recommendations** For iOS versions prior to 11, update to version 11 or later. For Safari versions prior to 11, update to version 11 or later. For iCloud versions prior to 7.0 on Windows, update to version 7.0 or later. For iTunes versions prior to 12.7 on Windows, update to version 12.7 or later. For tvOS versions prior to 11, update to version 11 or later.

**Name of the Vulnerable Software and Affected Versions** LibTIFF version 4.0.7 **Description** The issue is related to a heap-based buffer over-read in the tif lzw.c file, which can result in denial of service (DoS) or code execution. This can be triggered by a crafted bmp image when using the tools/bmp2tiff utility. **Recommendations** For LibTIFF version 4.0.7, consider avoiding the use of crafted bmp images with the bmp2tiff tool until a patch is available. As a temporary workaround, restrict access to the tif lzw.c function to minimize the risk of exploitation.