CVE Catalog

CVE-2017-12997

Critical
Published: Translated: NVD NIST

Summary

The LLDP parser in tcpdump before version 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().

Risk Assessment

An infinite loop could cause the tcpdump process to hang, affecting the ability of administrators to monitor network traffic.

Recommendation

It is recommended to upgrade tcpdump to version 4.9.2 or later to mitigate this vulnerability.

Original NVD description (English source)

The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().

Vulnerability data from NVD (NIST) · CISA KEV · EPSS