CVE Catalog
CVE-2017-13003
CriticalSummary
The LMP parser in tcpdump before version 4.9.2 has a buffer over-read in the lmp_print() function.
Risk Assessment
An attacker may exploit this vulnerability to read data outside the allocated buffer, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to update tcpdump to version 4.9.2 or later to mitigate this vulnerability.
Original NVD description (English source)
The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().