CVE-2017-11108: tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and applica...

Security readout for executives and security teams

CVE-2017-11108 is a tcpdump crash bug. A crafted packet can make tcpdump 4.9.0 read past a heap buffer while decoding Spanning Tree Protocol data, causing the application to terminate. The supplied sources describe denial of service, not system takeover. Likely exposure is systems running tcpdump 4.9.0 or vendor-packaged affected builds, especially network monitoring, troubleshooting, or packet-analysis systems that process STP frames or untrusted captures. Internet-facing service exposure is not established by the supplied sources. Treat as a targeted reliability issue for network operations and security monitoring. Prioritize patching systems where tcpdump supports incident response, diagnostics, or automated capture processing because crashes can reduce visibility during network events. Mitigation focus: Update tcpdump using the relevant vendor advisory or package channel.; Check Gentoo, Debian, Apple, and Red Hat guidance for affected package details.; Limit tcpdump processing of untrusted captures where feasible..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.