CVE-2017-13006

CVE-2017-13006 is a critical buffer over-read vulnerability affecting the L2TP parser in tcpdump versions prior to 4.9.2. This flaw allows for unauthenticated, remote attackers to achieve high impact to confidentiality, integrity, and availability with low attack complexity, as indicated by its CVSS score of 9.8. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 11 mentions and media coverage, suggesting awareness despite its inactive status on the CISA KEV catalog.