CVE Catalog
CVE-2017-13028
CriticalSummary
The BOOTP parser in tcpdump before version 4.9.2 has a buffer over-read in the bootp_print() function.
Risk Assessment
An attacker may exploit this vulnerability to read data outside the allocated buffer, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to update tcpdump to version 4.9.2 or later to mitigate this vulnerability.
Original NVD description (English source)
The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().