CVE Catalog
CVE-2017-13017
CriticalSummary
The DHCPv6 parser in tcpdump before version 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().
Risk Assessment
Exploitation of this vulnerability may lead to the disclosure of sensitive information from memory, which could be leveraged by attackers.
Recommendation
It is recommended to update tcpdump to version 4.9.2 or later to mitigate this vulnerability.
Original NVD description (English source)
The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().