CVE-2017-5203

Critical

Published: 28/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The BOOTP parser in tcpdump before version 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().

Exploitation of this vulnerability may lead to remote code execution or application crashes, posing a threat to system integrity and availability.

It is recommended to update tcpdump to version 4.9.0 or later to mitigate this vulnerability.

Original NVD description (English source)

The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().