CVE-2016-8575: The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vuln...

Security readout for executives and security teams

CVE-2016-8575 is a buffer overflow in tcpdump’s Q.933 packet parser before version 4.9.0. It matters when staff or systems use vulnerable tcpdump to inspect untrusted network traffic or packet captures. The public record does not provide a CVSS score or confirm active exploitation. Exposure is most likely on Linux/Unix systems running tcpdump earlier than 4.9.0, especially where analysts, monitoring tools, or scripts process untrusted pcaps or live traffic. Debian, Red Hat, and Gentoo issued advisories, so distro-packaged tcpdump should be checked against vendor-fixed versions. Address during normal vulnerability remediation, with higher priority for security operations systems that inspect untrusted captures. There is no cited active exploitation, but parser memory-safety bugs in network analysis tools can create operational and workstation risk. Mitigation focus: Upgrade tcpdump to 4.9.0 or a vendor-fixed package.; Review Debian, Red Hat, or Gentoo advisories for distribution-specific fixed versions.; Avoid parsing untrusted packet captures with vulnerable tcpdump..

Prepared

Jun 13, 2026, 10:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.