CVE-2017-11543: tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.

Security readout for executives and security teams

CVE-2017-11543 is a buffer overflow in tcpdump 4.9.0. Tcpdump is commonly used by administrators and security teams to inspect network traffic. A malformed packet or capture targeting SLIP link-layer parsing could make a vulnerable tcpdump process mishandle memory. The sources do not provide CVSS, active exploitation, or a complete impact statement. Exposure is most likely on systems running tcpdump 4.9.0 or vendor builds derived from it. Higher-risk locations include monitoring servers, administrator workstations, incident-response hosts, and appliances that process untrusted packet captures or network traffic. Prioritize routine remediation for systems that use tcpdump in monitoring or incident response. Escalate if vulnerable hosts process external or customer-supplied packet captures. The available evidence supports prompt patching, not emergency response for active exploitation. Mitigation focus: Apply tcpdump updates from the relevant operating-system vendor advisory.; Avoid opening untrusted packet captures with tcpdump 4.9.0.; Run tcpdump with least privileges where operationally feasible..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.