CVE-2017-13689

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The IKEv1 parser in tcpdump before version 4.9.2 has a buffer over-read in the ikev1_id_print() function.

Exploitation of this vulnerability may lead to the disclosure of sensitive information from memory, posing a risk to data security.

It is recommended to update tcpdump to version 4.9.2 or later to mitigate this vulnerability.

Original NVD description (English source)

The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().