CVE-2017-13022

CVE-2017-13022 describes a critical buffer over-read vulnerability in the IP parser of tcpdump versions prior to 4.9.2, specifically within the print-ip.c:ip_printroute() function. This flaw carries a CVSS score of 9.8 (CRITICAL), indicating it is remotely exploitable with low attack complexity, requiring no user interaction, and can lead to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 11 mentions and media coverage, suggesting awareness despite the lack of confirmed exploits.