CVE-2016-7993

Critical

Published: 28/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A bug in util-print.c:relts_print() in tcpdump before version 4.9.0 could lead to a buffer overflow in multiple protocol parsers, including DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, and PIM.

Risk Assessment

Buffer overflow could allow an attacker to execute arbitrary code, posing a serious security threat to the system.

Recommendation

It is recommended to update tcpdump to version 4.9.0 or later to mitigate this vulnerability.

Original NVD description (English source)

A bug in util-print.c:relts_print() in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM).