CVE-2017-13009

CVE-2017-13009 describes a critical buffer over-read vulnerability in the IPv6 mobility parser within tcpdump versions prior to 4.9.2. This flaw, rated 9.8 CRITICAL, allows an unauthenticated attacker to remotely execute arbitrary code or cause a denial of service with low attack complexity. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 11 mentions and media coverage, indicating awareness. Organizations using affected tcpdump versions should prioritize patching to mitigate this high-risk vulnerability.