CVE-2017-12991

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The BGP parser in tcpdump before version 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().

Exploitation of this vulnerability may lead to unauthorized memory read, potentially disclosing sensitive information.

It is recommended to upgrade tcpdump to version 4.9.2 or later to mitigate this vulnerability.

Original NVD description (English source)

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().