CVE-2017-13054

CVE-2017-13054 describes a critical buffer over-read vulnerability in the LLDP parser of tcpdump versions prior to 4.9.2. This flaw, rated 9.8 CVSS (Critical), allows an unauthenticated attacker to remotely execute arbitrary code or cause a denial of service due to its low attack complexity and high impact on confidentiality, integrity, and availability. While the vulnerability has a high FAUCET Risk Score, there is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB, and it is not listed on CISA's KEV catalog. Community discussion and media coverage are minimal, with only one mention and one article noting its fix among 90 other CVEs in tcpdump.