CVE-2017-13037

CVE-2017-13037 is a critical buffer over-read vulnerability affecting the IP parser in tcpdump versions prior to 4.9.2. This flaw, located in print-ip.c:ip_printts(), allows for remote, low-complexity attacks without user interaction, leading to potential compromise of confidentiality, integrity, and availability. Despite its high CVSS score of 9.8, there is no known active exploitation, nor are there public exploits available in Metasploit, Nuclei, or ExploitDB. While it has received limited community discussion and media coverage, the high FAUCET Risk Score of 80/100 indicates a significant theoretical risk.