CVE Catalog
CVE-2017-11541
CriticalSummary
tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
Risk Assessment
An attacker may exploit this vulnerability to read memory outside the allocated buffer, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to update tcpdump to the latest version to mitigate this vulnerability.
Original NVD description (English source)
tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.