CVE-2016-7940: The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions.

Security readout for executives and security teams

CVE-2016-7940 is a buffer overflow in tcpdump’s Spanning Tree Protocol parser before version 4.9.0. A crafted packet or capture file could make tcpdump mishandle memory while decoding STP traffic. Business urgency is highest where tcpdump runs on monitoring systems, jump boxes, or analyst workstations that inspect untrusted network captures. Systems with tcpdump versions before 4.9.0 are potentially exposed, especially if they capture live local Layer 2 traffic or open untrusted pcap files. Exposure depends on installed package version and vendor backports, not only the upstream version string. Prioritize remediation on security monitoring infrastructure and analyst workstations. This is not flagged as actively exploited, but packet parsers are exposed to untrusted input by design, making timely patching prudent. Mitigation focus: Upgrade tcpdump to 4.9.0 or a vendor-fixed package.; Apply relevant Debian, Red Hat, or Gentoo security advisories where applicable.; Avoid opening untrusted capture files with vulnerable tcpdump versions..

Prepared

Jun 13, 2026, 09:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.