CVE-2017-13008: The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().

Security readout for executives and security teams

CVE-2017-13008 is a tcpdump parsing flaw. Older tcpdump versions before 4.9.2 can read past a buffer while decoding IEEE 802.11 wireless data. The main business concern is exposure on systems that inspect packet captures or wireless traffic with outdated tcpdump packages. Exposure is most likely where tcpdump before 4.9.2 is installed and used to parse IEEE 802.11 traffic or capture files. Package-managed Linux, macOS, and enterprise distributions may be affected if vendor updates were not applied. Treat as a routine but important hygiene fix, with higher priority for network analysis, wireless security, forensic, and packet-capture systems. There is no source-backed active exploitation signal, but outdated packet parsers create avoidable operational risk. Mitigation focus: Upgrade tcpdump to 4.9.2 or a vendor-fixed package.; Apply relevant Gentoo, Debian, Apple, or Red Hat security updates.; Restrict use of outdated tcpdump on untrusted capture files..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.