cve.bz

CWE-125: Out-of-bounds Read, page 199

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-540 Overread Buffers Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-125, as MITRE names them. Credits.

Ask an AI about CWE-125

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2017-13054EPSS 3.2%

    The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().

  2. 9.8CVE-2017-13053EPSS 3.2%

    The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().

  3. 9.8CVE-2017-13052EPSS 3.4%

    The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().

  4. 9.8CVE-2017-13051EPSS 3.2%

    The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().

  5. 9.8CVE-2017-13050EPSS 4.6%

    The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().

  6. 9.8CVE-2017-13049EPSS 3.4%

    The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().

  7. 9.8CVE-2017-13048EPSS 3.2%

    The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().

  8. 9.8CVE-2017-13047EPSS 3.2%

    The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().

  9. 9.8CVE-2017-13046EPSS 3.2%

    The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().

  10. 9.8CVE-2017-13045EPSS 3.4%

    The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().

  11. 9.8CVE-2017-13044EPSS 3.4%

    The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().

  12. 9.8CVE-2017-13043EPSS 3.2%

    The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().

  13. 9.8CVE-2017-13042EPSS 3.2%

    The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().

  14. 9.8CVE-2017-13041EPSS 4.6%

    The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().

  15. 9.8CVE-2017-13040EPSS 4.6%

    The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.

  16. 9.8CVE-2017-13039EPSS 3.4%

    The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.

  17. 9.8CVE-2017-13038EPSS 4.5%

    The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().

  18. 9.8CVE-2017-13037EPSS 3.4%

    The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().

  19. 9.8CVE-2017-13036EPSS 3.4%

    The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().

  20. 9.8CVE-2017-13035EPSS 3.4%

    The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().

  21. 9.8CVE-2017-13034EPSS 3.2%

    The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().

  22. 9.8CVE-2017-13033EPSS 4.3%

    The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().

  23. 9.8CVE-2017-13032EPSS 3.2%

    The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().

  24. 9.8CVE-2017-13031EPSS 3.2%

    The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().

  25. 9.8CVE-2017-13030EPSS 3.4%

    The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.

  26. 9.8CVE-2017-13029EPSS 3.4%

    The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().

  27. 9.8CVE-2017-13028EPSS 3.6%

    The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().

  28. 9.8CVE-2017-13027EPSS 3.2%

    The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().

  29. 9.8CVE-2017-13026EPSS 3.2%

    The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.

  30. 9.8CVE-2017-13025EPSS 3.4%

    The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().

  31. 9.8CVE-2017-13024EPSS 3.5%

    The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().

  32. 9.8CVE-2017-13023EPSS 3.4%

    The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().

  33. 9.8CVE-2017-13022EPSS 3.4%

    The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().

  34. 9.8CVE-2017-13021EPSS 3.4%

    The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().

  35. 9.8CVE-2017-13020EPSS 3.3%

    The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().

  36. 9.8CVE-2017-13019EPSS 4.5%

    The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().

  37. 9.8CVE-2017-13018EPSS 2.5%

    The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().

  38. 9.8CVE-2017-13017EPSS 2.4%

    The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().

  39. 9.8CVE-2017-13016EPSS 2.5%

    The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().

  40. 9.8CVE-2017-13015EPSS 2.4%

    The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().

  41. 9.8CVE-2017-13014EPSS 2.5%

    The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions.

  42. 9.8CVE-2017-13013EPSS 2.5%

    The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.

  43. 9.8CVE-2017-13012EPSS 2.5%

    The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().

  44. 9.8CVE-2017-13010EPSS 3.5%

    The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().

  45. 9.8CVE-2017-13009EPSS 3.4%

    The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().

  46. 9.8CVE-2017-13008EPSS 3.4%

    The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().

  47. 9.8CVE-2017-13007EPSS 2.4%

    The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().

  48. 9.8CVE-2017-13006EPSS 2.5%

    The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.

  49. 9.8CVE-2017-13005EPSS 2.5%

    The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().

  50. 9.8CVE-2017-13004EPSS 3.5%

    The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().