The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().
{
"cpe": "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
"source": [
"CPE_RANGE",
"REFERENCES"
],
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "4.9.1"
}
]
}
[
{
"target": {
"file": "print-dhcp6.c"
},
"deprecated": false,
"id": "CVE-2017-13017-8cd970e1",
"signature_version": "v1",
"digest": {
"line_hashes": [
"241785703966375424625464816756373875321",
"260171420687082854402652062305870914269",
"4267060419058805057624728670807481844",
"144918831268529722871293797921208930653"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/11b426ee05eb62ed103218526f1fa616851c43ce"
},
{
"target": {
"file": "print-dhcp6.c",
"function": "dhcp6opt_print"
},
"deprecated": false,
"id": "CVE-2017-13017-ba8bdea4",
"signature_version": "v1",
"digest": {
"function_hash": "333557242971206384915371355876566620229",
"length": 11027.0
},
"signature_type": "Function",
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/11b426ee05eb62ed103218526f1fa616851c43ce"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-13017.json"
"2026-07-08T11:47:50Z"