CVE-2017-13010

CVE-2017-13010 describes a critical buffer over-read vulnerability (CWE-125) in the BEEP parser of tcpdump versions prior to 4.9.2. This flaw allows an unauthenticated attacker to remotely trigger a denial of service, information disclosure, or arbitrary code execution with high impact on confidentiality, integrity, and availability, as reflected by its CVSS score of 9.8. Despite its critical severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB, and community discussion and media coverage remain low.