CVE-2017-13009: The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().

Security readout for executives and security teams

tcpdump versions before 4.9.2 could read past the end of a packet buffer when decoding IPv6 mobility headers. This affects systems or workflows that use tcpdump to inspect live traffic or packet capture files from untrusted sources. Exposure is most likely on servers, analyst workstations, appliances, or automation that run vulnerable tcpdump versions against untrusted network traffic or packet captures. The bundle does not provide CPEs or a complete vendor matrix. Treat this as a targeted hygiene issue, not an emergency. Prioritize remediation where tcpdump processes untrusted traffic or captures, especially on security monitoring systems, shared analysis hosts, and production troubleshooting environments. Mitigation focus: Upgrade tcpdump to 4.9.2 or later where available.; Apply the relevant OS vendor security update for tcpdump.; Restrict processing of untrusted packet capture files on vulnerable systems..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.