漏洞编号：CVE-2016-7922 IBM AIX tcpdump Buffer Overflow Vulnerabilities (tcpdump_advisory2)

AIX is prone to the following vulnerabilities:

tcpdump is vulnerable to multiple buffer overflow vulnerabilities caused by improper bounds checking by the parser.

Affected Platforms:
AIX 5.3, 6.1, 7.1, 7.2

Note:The detection requires root privileges to run "emgr -c" to check for patches. In absence of such privileges, the detection may not output actual results.
APAR versions:
IV94729s9b, IV94728s9c,IV94727s9b,IV94726s4c,IV94724s4b,IV94723s2a

Exploitation might allow a remote attacker to cause the application to crash.

The vendor has released fixes to resolve this vulnerability. Refer to AIX tcpdump_advisory2 to obtain more information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

AIX tcpdump_advisory2: AIX 5.3, 6.1, 7.1, 7.2 (tcpdump)