tested this CVE with 32-bit on 4.9.3, and it seems to be fixed

[tcpdump] / tests / tcp_header_heapoverflow.pcap

diff --git a/tests/tcp_header_heapoverflow.pcap b/tests/tcp_header_heapoverflow.pcap
index 547199639a80e9a395def88d00e3f76cbaad1f71..3d6b7c78c1b6e4067d745f92d4850ab07960975e 100644 (file)
Binary files a/tests/tcp_header_heapoverflow.pcap and b/tests/tcp_header_heapoverflow.pcap differ