CVE-2017-12897

CVE-2017-12897 is a critical buffer over-read vulnerability affecting the ISO CLNS parser in tcpdump versions prior to 4.9.2. This flaw allows an unauthenticated attacker to remotely trigger a denial of service, information disclosure, or potentially arbitrary code execution. Despite its critical CVSS score of 9.8, there is no evidence of active exploitation, and public exploit intelligence such as Metasploit modules or ExploitDB entries are unavailable. While community discussion and media coverage are limited, the vulnerability was addressed in a significant tcpdump update.