CVE-2017-13032

CVE-2017-13032 is a critical buffer over-read vulnerability affecting the RADIUS parser in tcpdump versions prior to 4.9.2. This flaw, located in print-radius.c:print_attr_string(), allows an attacker to potentially read sensitive memory regions. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. While no public exploit code (Metasploit, Nuclei, ExploitDB) or active exploitation (KEV) has been identified, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community.