CVE-2017-13050: The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_prin...

Security readout for executives and security teams

This flaw affects tcpdump before 4.9.2 when it parses RPKI-Router traffic. A malformed packet or capture could make tcpdump read beyond the intended buffer. For leaders, the main concern is vulnerable diagnostic or monitoring tooling processing untrusted traffic, not a business application directly exposed by name. Exposure is most likely on systems running tcpdump before 4.9.2, especially network monitoring, troubleshooting, packet-analysis, and incident-response environments that inspect live traffic or packet captures. The bundle does not provide complete affected CPEs or distribution-specific package versions. Treat as urgent for security operations and network teams because vulnerable tcpdump installations may process attacker-controlled traffic during routine monitoring. Prioritize patching exposed monitoring and analysis systems, while noting the bundle does not confirm active exploitation. Mitigation focus: Upgrade tcpdump to 4.9.2 or a vendor-fixed backported package.; Apply relevant vendor advisories from Gentoo, Debian, Apple, or Red Hat where applicable.; Avoid using vulnerable tcpdump versions on untrusted traffic or captures until remediated..

Prepared

May 22, 2026, 17:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.