CVE Catalog

CVE-2017-13001

Critical
Published: Translated: NVD NIST

Summary

The NFS parser in tcpdump before version 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().

Risk Assessment

An attacker may exploit this vulnerability to read data outside the allocated buffer, potentially leading to the disclosure of sensitive information.

Recommendation

It is recommended to upgrade tcpdump to version 4.9.2 or later to mitigate this vulnerability.

Original NVD description (English source)

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().

Vulnerability data from NVD (NIST) · CISA KEV · EPSS