CVE-2017-13009

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-13009
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-13009.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-13009
Downstream
Related
Published
2017-09-14T06:29:01Z
Modified
2025-10-21T04:10:36.779177Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().

References

Affected packages

Git / github.com/the-tcpdump-group/tcpdump

Affected ranges

Type
GIT
Repo
https://github.com/the-tcpdump-group/tcpdump
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
db8c799f6dfc68765c9451fcbfca06e662f5bd5f

Affected versions

tcpdump-3.*

tcpdump-3.5.1
tcpdump-3.6.1
tcpdump-3.7.1
tcpdump-3.8-bp

tcpdump-4.*

tcpdump-4.5.0
tcpdump-4.6.0
tcpdump-4.6.0-bp
tcpdump-4.7.0-bp
tcpdump-4.9.0-bp

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "target": {
            "file": "print-mobility.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "234336878474384708427175196259430270535",
                "298344445882304071452228613038770209582",
                "285693068405845694162644915113142030057",
                "62791597753041845556370966323581660457",
                "313232882752054436169099116818386108773",
                "252580815526277090766585413859216533063",
                "285693068405845694162644915113142030057",
                "281617827713227537654569541647933096749",
                "4415564542781331037917695057692305566",
                "99327614717100166854620837965346952261",
                "264767423360634760744780799932288400979",
                "154051172441574365569744158968866616234",
                "114720586672526779666389065944230257553",
                "231910312788443164837089486845675653104",
                "199699086715691308298720673519608407329",
                "165810960290965296679621845984728035524",
                "187900299945216593297092750220143750378",
                "181730557969849989110038525915321965148",
                "100474168979904691881384430968304747556",
                "275724834326419467331347677681740709636",
                "59284278426268529923729292256353664039",
                "266057581085670031398855051786562952692",
                "331798279224493516429919150128771764561",
                "338188315974508979308409268433506799592",
                "102765003821211087838727826282038657538",
                "104692071820677036742951212598380555759",
                "105432996161127581266490691879022243511",
                "77453860719682699964320788583778124577",
                "145530657233521137855203973755828525669",
                "165074276051844453429759818749891320962",
                "300260363717765982358445701213046441168",
                "126567815748666658821722029792171473565",
                "149646355514421098307140092078950212264",
                "174562165237359371102738316847029788456",
                "244291096427250790336870711868591750007",
                "279968696151388708693561917280003162409",
                "313494239679303061702198443674787955004",
                "294802473751201133039006079640536585115",
                "70624131908825635712357446448335074585",
                "238814787795788113330060552522813826719",
                "165074276051844453429759818749891320962",
                "273224363712622787801294318907705615472",
                "76658070863716878183301626804824292338",
                "249305064551709912380198932569630007239",
                "304794320628167767398721969247275998884"
            ]
        },
        "deprecated": false,
        "id": "CVE-2017-13009-bd28a314",
        "source": "https://github.com/the-tcpdump-group/tcpdump/commit/db8c799f6dfc68765c9451fcbfca06e662f5bd5f"
    }
]