CVE-2016-7930: The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print().

Security readout for executives and security teams

CVE-2016-7930 is a buffer overflow in tcpdump’s LLC/SNAP packet parser before version 4.9.0. Affected systems are those where tcpdump processes untrusted network traffic or packet capture files. Public sources in the bundle do not show known active exploitation. Exposure is most likely on Linux/Unix systems with tcpdump versions earlier than 4.9.0, especially monitoring hosts, packet-analysis workstations, and systems that inspect captures from untrusted sources. Treat as a routine but important infrastructure patch. Prioritize systems that run tcpdump frequently, ingest external captures, or perform network monitoring. Urgency increases where packet analysis is automated or privileged. Mitigation focus: Upgrade tcpdump to version 4.9.0 or later where directly managed.; Apply vendor security updates from Debian, Red Hat, Gentoo, or your operating-system distributor.; Restrict tcpdump use to trusted captures until fixed..

Prepared

Jun 13, 2026, 09:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.