CVE-2017-13000

tcpdump: Buffer over-read in print-802_15_4.c:ieee802_15_4_if_print() in IEEE 802.15.4 parser

Published Sep 14, 2017 CVSS 3.1 · 9.8 Critical EPSS 3.1% KEV · Not listed
Description
The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-1097-1 tcpdump security update
Debian DSA Debian DSA DSA-3971-1 tcpdump security update
EUVD EUVD EUVD-2017-4518 The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().
Ubuntu USN Ubuntu USN USN-3415-1 tcpdump vulnerabilities
Ubuntu USN Ubuntu USN USN-3415-2 tcpdump vulnerabilities
History
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Dec 4, 2025, 3:30 PM
Reserved
Aug 21, 2017, 12:00 AM
Status
Modified
Published
Sep 14, 2017, 6:29 AM
Modified
Jun 17, 2026, 1:04 AM
Severity
Low
Public date
Sep 13, 2017, 12:00 AM