CVE-2017-5485

Critical

Published: 28/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The ISO CLNS parser in tcpdump before version 4.9.0 has a buffer overflow in the lookup_nsap() function in addrtoname.c.

Exploitation of this vulnerability may lead to remote code execution or application crashes, posing a threat to system integrity and availability.

It is recommended to update tcpdump to version 4.9.0 or later to mitigate this vulnerability.

Original NVD description (English source)

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap().