CVE-2004-0183
Fixed in a distro release EPSS 6%
TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.
Products: tcpdump
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tcpdump | 3.7.2-4 |
| Debian 13 | tcpdump | 3.7.2-4 |
| Debian 14 | tcpdump | 3.7.2-4 |
| Debian 3.0 | tcpdump | 3.6.2-2.8 |
| Red Hat Enterprise Linux 3 | libpcap | 14:0.7.2-7.E3.2 |
| Red Hat Enterprise Linux 3 | tcpdump | 14:3.7.2-7.E3.2 |
| Red Hat Enterprise Linux 3 | tcpdump-debuginfo | 14:3.7.2-7.E3.2 |