CVE-2016-7935

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp_print().

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Jan 28, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-79369.8The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_print().CVE-2016-79379.8The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print().CVE-2016-79389.8The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1_print_frame().CVE-2016-79399.8The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions.CVE-2016-79409.8The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions.CVE-2016-79429.8The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geoCVE-2016-79439.8The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, whCVE-2016-79449.8Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of ICVE-2016-79457.5Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or iCVE-2016-79467.5X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields.CVE-2016-79479.8Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted reCVE-2016-79489.8X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data.
CVE-2016-7935: Critical severity, CVSS 9.8 | Vulnix