CVE-2017-13038

CVE-2017-13038 describes a critical buffer over-read vulnerability in the PPP parser of tcpdump versions prior to 4.9.2. This flaw, rated 9.8 CVSS (Critical), allows unauthenticated attackers to remotely trigger a denial of service, information disclosure, or potentially arbitrary code execution with low attack complexity. Despite its severity, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion beyond a single mention and one media article.