WRITEUP
WRITEUP
Exploit for CVE-2017-12896
- Tcpdump < 4.9.1 - Out-of-Bounds Read
AI Analysis
This patch addresses CVE-2017-12896, a buffer over-read vulnerability in tcpdump's ISAKMP parser. The fix adds bounds checks in the `isakmp_rfc3948_print()` function to prevent out-of-bounds reads when processing malformed ISAKMP packets.
Attack Type
DoS
Complexity
trivial
Reliability
reliable
MITRE ATT&CK
Click anywhere or press Esc to close