CVE Catalog

CVE-2017-12902

Critical
Published: Translated: NVD NIST

Summary

The Zephyr parser in tcpdump before version 4.9.2 has a buffer over-read in print-zephyr.c in several functions.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized memory access, potentially resulting in the disclosure of sensitive information.

Recommendation

It is recommended to upgrade tcpdump to version 4.9.2 or later to mitigate this vulnerability.

Original NVD description (English source)

The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS