CVE-2017-11541

CVE-2017-11541 describes a critical heap-based buffer over-read vulnerability in tcpdump version 4.9.0, specifically within the lldp_print function. This flaw allows for remote, unauthenticated attackers to cause a denial of service, information disclosure, or potentially execute arbitrary code. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its low attack complexity and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.