CVE-2016-7983: The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().

Security readout for executives and security teams

CVE-2016-7983 is a buffer overflow in tcpdump’s BOOTP packet parser before version 4.9.0. The risk is highest for systems or analysts that use tcpdump to inspect live traffic or packet captures containing BOOTP data. Public sources do not show active exploitation or a CVSS score. Exposure likely exists where tcpdump versions before 4.9.0 are installed, including vendor-packaged builds covered by Debian, Red Hat, or Gentoo advisories. Risk is tied to parsing BOOTP traffic or packet captures, not simply having the package installed and unused. Prioritize remediation on security operations workstations, network sensors, and servers that process packet captures. This is not presented as actively exploited, but tcpdump commonly handles untrusted network data, making timely patching prudent. Mitigation focus: Upgrade tcpdump to 4.9.0 or a vendor-supported package containing the fix.; Apply Debian DSA-3775, Red Hat RHSA-2017:1871, or Gentoo GLSA-201702-30 where applicable.; Avoid analyzing untrusted packet captures with vulnerable tcpdump until updated..

Prepared

Jun 13, 2026, 10:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.