CVE Catalog

CVE-2017-12988

Critical
Published: Translated: NVD NIST

Summary

The telnet parser in tcpdump before version 4.9.2 has a buffer over-read in the telnet_parse() function.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to data or information transmitted via telnet.

Recommendation

It is recommended to update tcpdump to version 4.9.2 or later to mitigate this vulnerability.

Original NVD description (English source)

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().

Vulnerability data from NVD (NIST) · CISA KEV · EPSS