tested this CVE with 32-bit on 4.9.3, and it seems to be fixed

[tcpdump] / tests / tftp-heapoverflow.pcap

diff --git a/tests/tftp-heapoverflow.pcap b/tests/tftp-heapoverflow.pcap
index f1ecc7348cc2d53cf906a0f0f4f95733feecc342..3f079fd290b7d579d02413855de83d2398ff4377 100644 (file)
Binary files a/tests/tftp-heapoverflow.pcap and b/tests/tftp-heapoverflow.pcap differ