CVE-2017-5342

Critical

Published: 28/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In tcpdump before version 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN, and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print().

Risk Assessment

Buffer overflow may lead to unauthorized access or application crashes, posing a threat to the integrity and availability of the system.

Recommendation

It is recommended to update tcpdump to version 4.9.0 or later to mitigate this vulnerability.

Original NVD description (English source)

In tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_print().