CVE-2017-13006

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The L2TP parser in tcpdump before version 4.9.2 has a buffer over-read in print-l2tp.c in several functions.

Exploitation of this vulnerability may lead to the disclosure of sensitive information from memory, posing a security risk to the system.

It is recommended to upgrade tcpdump to version 4.9.2 or later to mitigate this vulnerability.

Original NVD description (English source)

The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.