CVE-2017-13020

CVE-2017-13020 describes a critical buffer over-read vulnerability in the VTP parser of tcpdump versions prior to 4.9.2, affecting Debian Linux and tcpdump itself. With a CVSS score of 9.8, this flaw allows unauthenticated attackers to achieve high confidentiality, integrity, and availability impacts over the network with low attack complexity. Despite its critical severity, there is no evidence of active exploitation, nor are there publicly available Metasploit, Nuclei, or ExploitDB modules. Community discussion and media coverage are minimal, with only one article noting its fix among 90 other CVEs in tcpdump.