CVE-2017-11108

tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data

published July 8, 2017

CVSS
—
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04901 · 92.1th percentile
Published
2017-07-08T17:00Z
EPSS history
Timeline
  • 08 JUL 17:00Z
    tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data
    cvelistv5