CVE-2016-7993
CriticalSummary
A bug in util-print.c:relts_print() in tcpdump before version 4.9.0 could lead to a buffer overflow in multiple protocol parsers, including DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, and PIM.
Risk Assessment
Buffer overflow could allow an attacker to execute arbitrary code, posing a serious security threat to the system.
Recommendation
It is recommended to update tcpdump to version 4.9.0 or later to mitigate this vulnerability.
Other vulnerabilities in tcpdump
See all- CVE-2015-3138High
The print-wb.c file in tcpdump before version 4.7.4 contains a vulnerability that allows remote attackers to cause a denial of service through a segmentation fault and process crash.
- CVE-2017-12989High
The RESP parser in tcpdump before version 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().
- CVE-2017-11108High
tcpdump version 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.
- CVE-2015-2155High
A vulnerability in tcpdump before version 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
- CVE-2015-0261High
Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.
- CVE-2017-13725Critical
The IPv6 routing header parser in tcpdump before version 4.9.2 has a buffer over-read in the rt6_print() function.
- CVE-2017-13690Critical
The IKEv2 parser in tcpdump before version 4.9.2 has a buffer over-read in print-isakmp.c in several functions.
- CVE-2017-13689Critical
The IKEv1 parser in tcpdump before version 4.9.2 has a buffer over-read in the ikev1_id_print() function.
- CVE-2017-13688Critical
The OLSR parser in tcpdump before version 4.9.2 has a buffer over-read in the olsr_print() function.
- CVE-2017-13687Critical
The HDLC parser in tcpdump before version 4.9.2 has a buffer over-read in the chdlc_print() function.
Original NVD description (English source)
A bug in util-print.c:relts_print() in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM).