Related Vulnerabilities: CVE-2017-12899  

An out-of-bounds read vulnerability was discovered in tcpdump's handling of DECnet in tcpdump <= 4.9.1. An attacker could craft a malicious pcap file or send specially crafted packets to the network that would cause tcpdump to crash while processing the packet data.

Severity Medium

Remote Yes

Type Denial of service

Description

An out-of-bounds read vulnerability was discovered in tcpdump's handling of DECnet in tcpdump <= 4.9.1. An attacker could craft a malicious pcap file or send specially crafted packets to the network that would cause tcpdump to crash while processing the packet data.

AVG-361 tcpdump 4.9.1-1 4.9.2-1 Critical Fixed

13 Sep 2017 ASA-201709-5 AVG-361 tcpdump Critical multiple issues

https://github.com/the-tcpdump-group/tcpdump/commit/f96003b21e2abfbba59b926b10a7f9bc7d11e36c
https://github.com/the-tcpdump-group/tcpdump/commit/c6e0531b5def26ecf912e8de6ade86cbdaed3751