CVE-2017-5202

CRITICAL 9.8CVE-2017-5202 · Published 28/01/2017 · updated 17/06/2026

In short

CVE-2017-5202 is a CRITICAL (CVSS 9.8) vulnerability affecting tcpdump (tcpdump).
Chance of exploitation in the next 30 days (EPSS): 3.8%, higher than 89.9% of all vulnerabilities.
Fix: update to 4.9.0 or later.

Package	Affected versions	Patched versions
tcpdump tcpdump	`< 4.9.0`	`4.9.0`

The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 4.9.0

4.9.0

More vulnerabilities in tcpdump

See all →