The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print().
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7928
Reference (s):
- BID:95852
- URL: http://www.securityfocus.com/bid/95852
- https://www.mail-archive.com/[email protected]/msg1494526.html
- DEBIAN:DSA-3775
- URL: http://www.debian.org/security/2017/dsa-3775