CVE-2017-11542: Tcpdump

Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days.

tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.

Affected products

• Tcpdump Tcpdump: version 4.9.0 only

Published 2017-07-23. Last modified 2026-06-17.