CVE Catalog
CVE-2017-13033
CriticalSummary
The VTP parser in tcpdump before version 4.9.2 has a buffer over-read in the vtp_print() function.
Risk Assessment
An attacker may exploit this vulnerability to read data outside the allocated buffer, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to update tcpdump to version 4.9.2 or later to mitigate this vulnerability.
Original NVD description (English source)
The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().