CVE-2017-13018: The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().

Security readout for executives and security teams

CVE-2017-13018 is a tcpdump parsing flaw. Versions before 4.9.2 could read beyond a buffer while decoding PGM traffic. The practical risk is highest where staff or automated tools inspect untrusted network traffic or packet capture files. Exposure is likely on systems running tcpdump before 4.9.2, including network sensors, troubleshooting hosts, and forensic workflows that parse PGM packets or captures from untrusted sources. Treat this as a routine but necessary security update for network monitoring and incident response systems. Prioritize environments that inspect untrusted traffic or packet captures. Mitigation focus: Upgrade tcpdump to 4.9.2 or a vendor-fixed package.; Apply relevant Debian, Gentoo, Apple, or Red Hat guidance where applicable.; Limit processing of untrusted packet captures until tcpdump is updated..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.