CVE-2016-7935

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.0

Description The issue concerns a buffer overflow in the RTP parser, specifically in the rtp print() function within print-udp.c. Additionally, there's a mention of improper bounds checking by the ISO CLNS parser in the clnp print() function within print-isoclns.c, which could allow a remote attacker to overflow a buffer and potentially execute arbitrary code or cause the application to crash.

Recommendations For versions prior to 4.9.0, update to version 4.9.0 or later to resolve the buffer overflow issue in the RTP parser and the ISO CLNS parser. As a temporary workaround, consider restricting access to the rtp print() and clnp print() functions until a patch is available.