WRITEUP
WRITEUP
Exploit for CVE-2017-12902
- Tcpdump < 4.9.1 - Out-of-Bounds Read
AI Analysis
This patch addresses CVE-2017-12902, a buffer over-read vulnerability in tcpdump's Zephyr protocol parser. The fix improves bounds checking by using ND_TTEST() and properly handling truncated packet data.
Attack Type
DoS
Complexity
moderate
Reliability
reliable
MITRE ATT&CK
Click anywhere or press Esc to close