The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isisprintid().
{ "vanir_signatures": [ { "signature_type": "Function", "id": "CVE-2017-13035-8360ab08", "digest": { "length": 600.0, "function_hash": "29124096331955878928480718109774069627" }, "deprecated": false, "target": { "function": "isis_print_id", "file": "print-isoclns.c" }, "signature_version": "v1", "source": "https://github.com/the-tcpdump-group/tcpdump/commit/571a6f33f47e7a2394fa08f925e534135c29cf1e" }, { "signature_type": "Line", "id": "CVE-2017-13035-bf20f9ac", "digest": { "threshold": 0.9, "line_hashes": [ "318702498595438592512807409073883146692", "102689435166337162394667688315711273158", "13847154078745266308227980517560407190", "174705587854763018908741682831761683151", "172017160379834111182624976681632486330" ] }, "deprecated": false, "target": { "file": "print-isoclns.c" }, "signature_version": "v1", "source": "https://github.com/the-tcpdump-group/tcpdump/commit/571a6f33f47e7a2394fa08f925e534135c29cf1e" } ] }