Critical severity9.8NVD Advisory· Published Sep 14, 2017· Updated Jun 17, 2026
CVE-2017-12991
CVE-2017-12991
Description
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12- osv-coords10 versionspkg:rpm/opensuse/tcpdump&distro=openSUSE%20Tumbleweedpkg:rpm/suse/tcpdump&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2pkg:rpm/suse/tcpdump&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/tcpdump&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3pkg:rpm/suse/tcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSSpkg:rpm/suse/tcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2pkg:rpm/suse/tcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/tcpdump&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2pkg:rpm/suse/tcpdump&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/tcpdump&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3
< 4.99.1-1.2+ 9 more
- (no CPE)range: < 4.99.1-1.2
- (no CPE)range: < 4.9.2-14.5.1
- (no CPE)range: < 4.9.2-14.5.1
- (no CPE)range: < 3.9.8-1.30.13.1
- (no CPE)range: < 3.9.8-1.30.13.1
- (no CPE)range: < 4.9.2-14.5.1
- (no CPE)range: < 4.9.2-14.5.1
- (no CPE)range: < 4.9.2-14.5.1
- (no CPE)range: < 4.9.2-14.5.1
- (no CPE)range: < 4.9.2-14.5.1
Patches
Vulnerability mechanics
References
7- github.com/the-tcpdump-group/tcpdump/commit/50a44b6b8e4f7c127440dbd4239cf571945cc1e7nvdIssue TrackingPatchThird Party Advisory
- www.tcpdump.org/tcpdump-changes.txtnvdVendor Advisory
- www.debian.org/security/2017/dsa-3971nvd
- www.securitytracker.com/id/1039307nvd
- access.redhat.com/errata/RHEA-2018:0705nvd
- security.gentoo.org/glsa/201709-23nvd
- support.apple.com/HT208221nvd
News mentions
0No linked articles in our index yet.