CVE-2017-12900

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Several protocol parsers in tcpdump before version 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().

An attacker could exploit this vulnerability to read unauthorized data from memory, potentially leading to the disclosure of sensitive information.

It is recommended to upgrade tcpdump to version 4.9.2 or later to mitigate this vulnerability.

Original NVD description (English source)

Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().