CVE Catalog
CVE-2017-13015
CriticalSummary
The EAP parser in tcpdump before version 4.9.2 has a buffer over-read issue in the eap_print() function.
Risk Assessment
An attacker could exploit this vulnerability to read data outside the allocated buffer, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to upgrade tcpdump to version 4.9.2 or later to mitigate this vulnerability.
Original NVD description (English source)
The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().