CVE-2016-7923

Critical

Published: 28/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The ARP parser in tcpdump before version 4.9.0 has a buffer overflow in the arp_print() function in print-arp.c.

Exploitation of this vulnerability may lead to remote code execution or application crashes, posing a threat to system integrity and availability.

It is recommended to update tcpdump to version 4.9.0 or later to mitigate this vulnerability.

Original NVD description (English source)

The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print().