Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2017-11542

30
FAUCET Score

CVE-2017-11542 describes a critical heap-based buffer over-read vulnerability in tcpdump version 4.9.0, specifically within the pimv1_print function. This flaw carries a CVSSv3 score of 9.8, indicating a severe risk with network-based exploitation, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability without user interaction. While not listed in CISA's KEV catalog and lacking public exploit code on Metasploit or ExploitDB, the vulnerability has garnered some community discussion and media coverage, suggesting awareness within the cybersecurity community.

Impacted Technologies

VendorProductVersion(s)CPE
4.9.0CPE matchmatch criteria
cpe:2.3:a:tcpdump:tcpdump:4.9.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

9.8CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.0

Exploit Intelligence

EPSS Score
3.79%
Probability of exploitation in next 30 days
EPSS Percentile
88.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0379 is in the 82nd percentile among its peer group of 36,897 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: tcpdump-14:4.9.2-3.el7
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: tcpdump
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: tcpdump

Vendor Advisories (1)

redhatCVE-2017-11542Low

tcpdump: heap-based buffer over-read in the pimv1_print

Jul 18, 2017

References

access.redhat.com / errata/RHEA-2018:0705
github.com / hackerlib/hackerlib-vul/tree/master/tcpdump-vul/heap-buffer-overflow/print-pim
ExploitThird Party Advisory
security.gentoo.org / glsa/201709-23
support.apple.com / HT208221
debian.org / security/2017/dsa-3971
securityfocus.com / bid/99940
Third Party AdvisoryVDB Entry
securitytracker.com / id/1039307