The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpcapabilitiesprint() (BGPCAPCODEMP).
{ "urgency": "not yet assigned" }