CVE-2004-0057
Fixed in a distro release EPSS 5%
The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.
Products: lbl tcpdump
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tcpdump | 3.8.3-1 |
| Debian 13 | tcpdump | 3.8.3-1 |
| Debian 14 | tcpdump | 3.8.3-1 |
| Debian 3.0 | tcpdump | 3.6.2-2.7 |
| Red Hat Enterprise Linux 2.1 | arpwatch | 14:2.1a11-12.2.1AS.5 |
| Red Hat Enterprise Linux 2.1 | libpcap | 14:0.6.2-12.2.1AS.5 |
| Red Hat Enterprise Linux 2.1 | tcpdump | 14:3.6.2-12.2.1AS.5 |
| Red Hat Enterprise Linux 3 | libpcap | 14:0.7.2-7.E3.1 |
| Red Hat Enterprise Linux 3 | tcpdump | 14:3.7.2-7.E3.1 |
| Red Hat Enterprise Linux 3 | tcpdump-debuginfo | 14:3.7.2-7.E3.1 |