CVE Catalog
CVE-2017-12894
CriticalSummary
Several protocol parsers in tcpdump before version 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().
Risk Assessment
An attacker could exploit this vulnerability to read unauthorized data from memory, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to update tcpdump to version 4.9.2 or later to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().