CVE-2004-0055
Fixed in a distro release EPSS 4%
The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.
Products: lbl tcpdump
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tcpdump | 3.8.3-1 |
| Debian 13 | tcpdump | 3.8.3-1 |
| Debian 14 | tcpdump | 3.8.3-1 |
| Debian 3.0 | tcpdump | 3.6.2-2.7 |
| Red Hat Enterprise Linux 2.1 | arpwatch | 14:2.1a11-12.2.1AS.5 |
| Red Hat Enterprise Linux 2.1 | libpcap | 14:0.6.2-12.2.1AS.5 |
| Red Hat Enterprise Linux 2.1 | tcpdump | 14:3.6.2-12.2.1AS.5 |
| Red Hat Enterprise Linux 3 | libpcap | 14:0.7.2-7.E3.1 |
| Red Hat Enterprise Linux 3 | tcpdump | 14:3.7.2-7.E3.1 |
| Red Hat Enterprise Linux 3 | tcpdump-debuginfo | 14:3.7.2-7.E3.1 |