CVE-2017-12998

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The IS-IS parser in tcpdump before version 4.9.2 has a buffer over-read in the function isis_print_extd_ip_reach().

Exploitation of this vulnerability may lead to unauthorized memory access, potentially disclosing sensitive information.

It is recommended to update tcpdump to version 4.9.2 or later to mitigate this vulnerability.

Original NVD description (English source)

The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().