CVE-2017-12995

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The DNS parser in tcpdump before version 4.9.2 could enter an infinite loop due to a bug in the ns_print() function in print-domain.c.

Risk Assessment

If this vulnerability is exploited, an attacker could cause tcpdump to become unresponsive, leading to a loss of availability of the network traffic analysis tool.

Recommendation

It is recommended to update tcpdump to version 4.9.2 or later to mitigate this vulnerability.

Original NVD description (English source)

The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().