CVE-2017-12997
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2017-12997
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12997.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-12997
- Downstream
- Related
- Published
- 2017-09-14T06:29:00Z
- Modified
- 2025-10-21T04:10:36.261870Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldpprivate8021_print().
- References
-
- http://www.debian.org/security/2017/dsa-3971
- http://www.tcpdump.org/tcpdump-changes.txt
- https://access.redhat.com/errata/RHEA-2018:0705
- https://github.com/the-tcpdump-group/tcpdump/commit/34cec721d39c76be1e0a600829a7b17bdfb832b6
- https://security.gentoo.org/glsa/201709-23
- http://www.securityfocus.com/bid/100914
- http://www.securitytracker.com/id/1039307
- https://support.apple.com/HT208221
Affected packages
Git / github.com/the-tcpdump-group/tcpdump
Affected ranges
- Type
- GIT
- Repo
- https://github.com/the-tcpdump-group/tcpdump
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
tcpdump-3.*
tcpdump-3.5.1
tcpdump-3.6.1
tcpdump-3.7.1
tcpdump-3.8-bp
tcpdump-4.*
tcpdump-4.5.0
tcpdump-4.6.0
tcpdump-4.6.0-bp
tcpdump-4.7.0-bp
tcpdump-4.9.0-bp
Database specific
vanir_signatures
[
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "1885717028255664028988507052205420652",
"length": 5871.0
},
"target": {
"function": "lldp_private_8021_print",
"file": "print-lldp.c"
},
"id": "CVE-2017-12997-58ea8a65",
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/34cec721d39c76be1e0a600829a7b17bdfb832b6",
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"74544335452402900651937902790664826624",
"162434760775406061849094769297440321055",
"235121720973665958348604678502699247504",
"142543695188466190577486799355006657278",
"295400370259204944089056546972592272984",
"150842100437704287684774663276946911020",
"166407419649807776275491154886288005496",
"311871776310507690437950924185119220620",
"46000881761558309334053379414877950803",
"79061019225880693557119226300733005865"
],
"threshold": 0.9
},
"target": {
"file": "print-lldp.c"
},
"id": "CVE-2017-12997-a06a8984",
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/34cec721d39c76be1e0a600829a7b17bdfb832b6",
"signature_type": "Line"
}
]