CVE Catalog

CVE-2017-12895

Critical
Published: Translated: NVD NIST

Summary

The ICMP parser in tcpdump before version 4.9.2 has a buffer over-read issue in the icmp_print() function.

Risk Assessment

Exploitation of this vulnerability may lead to the disclosure of sensitive information from memory, posing a threat to data security.

Recommendation

It is recommended to update tcpdump to version 4.9.2 or later to mitigate this vulnerability.

Original NVD description (English source)

The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().

Vulnerability data from NVD (NIST) · CISA KEV · EPSS