CVE-2016-7993: Buffer Overflow
Published Jan 28, 2017
·Updated
A bug in util-print.c:reltsprint() in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM).
Affected Software
1 affected component
tcpdump tcpdump<=4.8.1
Event History
Jan 28, 2017
CVE Published
via MITRE·01:33 AM
Data Sourced
via MITRE·01:33 AM
Description
Data Sourced
via NVD·01:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-7993?
CVE-2016-7993 is classified as a critical vulnerability due to its potential for causing buffer overflow attacks.
2
How do I fix CVE-2016-7993?
To fix CVE-2016-7993, you should upgrade tcpdump to version 4.9.0 or later.
3
What versions of tcpdump are affected by CVE-2016-7993?
Versions of tcpdump prior to 4.9.0, specifically up to and including 4.8.1, are affected by CVE-2016-7993.
4
What type of issues can CVE-2016-7993 cause?
CVE-2016-7993 can lead to buffer overflows in multiple protocol parsers, which may allow for arbitrary code execution.
5
Is CVE-2016-7993 a known exploit?
Yes, there are known exploits associated with CVE-2016-7993 that leverage the buffer overflow vulnerability.