CVE-2017-13002: The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().

Security readout for executives and security teams

CVE-2017-13002 is a tcpdump parsing flaw. A vulnerable tcpdump version can read beyond a buffer while decoding AODV data. For business leaders, the concern is systems or workflows that inspect untrusted packets or capture files with old tcpdump releases. Exposure is most likely on systems running tcpdump before 4.9.2, especially where tcpdump parses live traffic or packet captures from untrusted sources. The supplied data does not identify affected downstream products beyond listed vendor advisories. Prioritize remediation where tcpdump is exposed to untrusted network data or used in monitoring pipelines. The high CVSS score supports urgent patching, but urgency should be highest for actively used vulnerable installations. Mitigation focus: Upgrade tcpdump to 4.9.2 or a vendor-fixed package.; Apply relevant Gentoo, Debian, Apple, or Red Hat vendor updates.; Avoid parsing untrusted captures with vulnerable tcpdump until patched..

Prepared

May 22, 2026, 17:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.