CVE-2016-7931: The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().

Security readout for executives and security teams

CVE-2016-7931 is a buffer overflow in tcpdump’s MPLS packet parser before version 4.9.0. The business risk is mainly to systems or analysts using tcpdump to inspect untrusted network traffic or packet captures. Public sources provided do not show active exploitation, and CVSS details are not available in the bundle. Exposure is likely where tcpdump versions before 4.9.0 are installed and used to parse live traffic or packet capture files containing MPLS data. Systems with tcpdump installed but not used have lower practical exposure. Treat as a routine but important infrastructure update. Prioritize network monitoring, packet analysis, incident response, and engineering systems that inspect untrusted traffic or captures. Mitigation focus: Upgrade tcpdump to version 4.9.0 or later where available.; Apply relevant Debian, Red Hat, or Gentoo security updates.; Check current vendor guidance for supported package versions..

Prepared

Jun 13, 2026, 09:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.