CVE-2017-13024

CVE-2017-13024 describes a critical buffer over-read vulnerability in the IPv6 mobility parser of tcpdump versions prior to 4.9.2, affecting Debian Linux distributions. With a CVSS score of 9.8, this vulnerability allows unauthenticated attackers to achieve high impact on confidentiality, integrity, and availability over the network with low attack complexity. Despite its critical severity and high risk score, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the CISA KEV catalog, though it has received some community and media attention.