Critical
Security advisory
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-12898
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:00 UTC · Revision 1
Source evidence
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().
osv:CVE-2017-12898
Complete source record
{
"id": "2c4c777d3fd5d108e2c20d348220ed47d010363a9be1006c1a4df2daa6103e93",
"url": "https://osv.dev/vulnerability/CVE-2017-12898",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-12898",
"summary": "The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().",
"evidence": "osv:CVE-2017-12898",
"products": [],
"severity": "critical",
"structured": {
"id": "CVE-2017-12898",
"aliases": [
"CVE-2017-12898"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/the-tcpdump-group/tcpdump",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "993a67c8e648bc8b19881e29a60f41273cfbee7b"
},
{
"fixed": "19d25dd8781620cd41bf178a5e2e27fc1cf242d0"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "4.9.1"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "19d25dd8781620cd41bf178a5e2e27fc1cf242d0"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"tcpdump-4.9.1",
"tcpdump-4.9.0",
"tcpdump-4.9.0-bp",
"tcpdump-4.7.0-bp",
"tcpdump-4.6.0-bp",
"tcpdump-4.6.0",
"tcpdump-4.5.0",
"tcpdump-3.8-bp",
"tcpdump-3.7.1",
"tcpdump-3.6.1",
"tcpdump-3.5.1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12898.json",
"vanir_signatures": [
{
"id": "CVE-2017-12898-3b7fb6ba",
"digest": {
"length": 6025,
"function_hash": "21139753489106957517658775015852748517"
},
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/19d25dd8781620cd41bf178a5e2e27fc1cf242d0",
"target": {
"file": "print-nfs.c",
"function": "interp_reply"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2017-12898-41b42b1e",
"digest": {
"threshold": 0.9,
"line_hashes": [
"127317313442346275295559882146119751530",
"241600520516935403415984608546970019327",
"338460553449233992501667963972015525178",
"291450807806231055860040681408419903127",
"181955914805768374336236640425101097071",
"171812410143117632131877592102150396256",
"284922431346734264084003622471675639298",
"336279715126082732432462901174805324910",
"100537490746767659162768433067530264292",
"173074534873199891007016609138239876167",
"273538727003751144552699383338196417592",
"110909602020273231411399147542526417472",
"61447531782435817624936174153299134424",
"205727100996738664689732567831026741968",
"307849859578792554650880223011387369545",
"162123200413621187049531445205972443563",
"62779088341144342744345596034064662379",
"318923542741852975490231070271089407560",
"82866521657533455590935159960550164456",
"161864823414551872016658482410911905306",
"255962727132895016477594354117840529912",
"137564491442497949459508997510001631156",
"308064832752934556879751117834163660362",
"57011675749235659288422021745011681240",
"239760975085795890523621878657639655761",
"100476854254657696201830610023167625462",
"245336150115324014049989904668583701023"
]
},
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/19d25dd8781620cd41bf178a5e2e27fc1cf242d0",
"target": {
"file": "print-nfs.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2017-12898-71049415",
"digest": {
"length": 6090,
"function_hash": "157000007934667414398744259784281522189"
},
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/19d25dd8781620cd41bf178a5e2e27fc1cf242d0",
"target": {
"file": "print-nfs.c",
"function": "nfsreq_print_noaddr"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2017-12898-e420d719",
"digest": {
"length": 728,
"function_hash": "70867151185073264795170215056074031466"
},
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/19d25dd8781620cd41bf178a5e2e27fc1cf242d0",
"target": {
"file": "print-nfs.c",
"function": "parserep"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:03:10Z"
}
}
],
"modified": "2026-10-24T14:03:10.122751181Z",
"provider": "osv",
"references": [
"https://support.apple.com/HT208221",
"https://access.redhat.com/errata/RHEA-2018:0705",
"https://security.gentoo.org/glsa/201709-23",
"https://github.com/the-tcpdump-group/tcpdump/commit/19d25dd8781620cd41bf178a5e2e27fc1cf242d0"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*"
],
"vendor_product": "tcpdump:tcpdump",
"extracted_events": [
{
"range": [
{
"last_affected": "4.9.1"
}
],
"source": "CPE_RANGE"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2017-12898",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 442762,
"published_at": "2017-09-14T06:29:00.387+00:00"
}