CVE-2017-13045

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The VQP parser in tcpdump before version 4.9.2 has a buffer over-read in the function print-vqp.c:vqp_print().

Exploitation of this vulnerability may lead to unauthorized memory reads, potentially exposing sensitive data.

It is recommended to update tcpdump to version 4.9.2 or later to mitigate this vulnerability.

Original NVD description (English source)

The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().