CVE-2017-11542: tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.

Security readout for executives and security teams

This flaw affects tcpdump 4.9.0 while parsing PIMv1 network data. A malformed packet or capture could cause tcpdump to read past a heap buffer, risking a crash or unstable analysis tooling. The bundle does not include CVSS, KEV listing, or confirmed in-the-wild exploitation. Likely exposed assets are systems running tcpdump 4.9.0 or vendor packages containing the vulnerable tcpdump code, especially monitoring hosts, network appliances, forensics workstations, and CI/security tooling that parse untrusted packet captures. Treat this as a patch-management issue for network monitoring and security operations systems. It is not KEV-listed in the provided bundle, but tcpdump often handles attacker-controlled traffic, making timely remediation appropriate. Mitigation focus: Inventory tcpdump versions across servers, workstations, appliances, containers, and security tool images.; Apply tcpdump updates from the relevant OS or vendor advisory channel.; Avoid processing untrusted packet captures with vulnerable tcpdump builds..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.