CVE-2017-12999

CVE-2017-12999 is a critical buffer over-read vulnerability affecting the IS-IS parser in tcpdump versions prior to 4.9.2. This flaw, located in print-isoclns.c:isis_print(), could allow an unauthenticated attacker to remotely trigger a denial of service, information disclosure, or even arbitrary code execution. With a CVSS score of 9.8, it represents a severe risk due to its network-based attack vector and low attack complexity. Despite its high severity, there is no evidence of active exploitation, nor is public exploit code available in Metasploit or ExploitDB, and it is not listed on CISA's KEV catalog. Community discussion and media coverage are minimal, with only one article mentioning its fix.