CVE-2017-13046: The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().

Security readout for executives and security teams

CVE-2017-13046 is a tcpdump flaw in its BGP packet parser before version 4.9.2. A malformed BGP packet or capture could make tcpdump read beyond the intended buffer while printing attributes. The public bundle does not provide CVSS, confirmed exploit activity, or detailed impact beyond buffer over-read. Most exposed environments are network operations, incident response, SOC, and routing teams that run tcpdump on untrusted traffic or inspect third-party packet captures. General endpoints are lower concern unless tcpdump is installed and used for packet analysis. Handle as a targeted maintenance item, not an emergency, unless vulnerable tcpdump is used on untrusted routing traffic or external captures. Prioritize network analysis systems and security workstations first. Mitigation focus: Upgrade tcpdump to 4.9.2 or a vendor-fixed package.; Apply relevant Debian, Gentoo, Apple, or Red Hat security updates where applicable.; Avoid analyzing untrusted packet captures with vulnerable tcpdump builds..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.