The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityoptprint().
[
{
"id": "CVE-2017-13025-98becffd",
"target": {
"file": "print-mobility.c"
},
"signature_version": "v1",
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/5338aac7b8b880b0c5e0c15e27dadc44c5559284",
"digest": {
"threshold": 0.9,
"line_hashes": [
"175818036479710347556139957666244724138",
"251512403954768599209684473020015424464",
"271442740744046116653186888775676988962",
"184265055336101742365907267887223888686"
]
},
"deprecated": false,
"signature_type": "Line"
},
{
"id": "CVE-2017-13025-f74ba5e9",
"target": {
"function": "mobility_opt_print",
"file": "print-mobility.c"
},
"signature_version": "v1",
"source": "https://github.com/the-tcpdump-group/tcpdump/commit/5338aac7b8b880b0c5e0c15e27dadc44c5559284",
"digest": {
"function_hash": "99555000603586823007512189639991642376",
"length": 1888.0
},
"deprecated": false,
"signature_type": "Function"
}
]