CVE-2004-0184
Fixed in a distro release EPSS 60%
Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.
Products: tcpdump
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tcpdump | 3.7.2-4 |
| Debian 13 | tcpdump | 3.7.2-4 |
| Debian 14 | tcpdump | 3.7.2-4 |
| Debian 3.0 | tcpdump | 3.6.2-2.8 |
| Red Hat Enterprise Linux 3 | libpcap | 14:0.7.2-7.E3.2 |
| Red Hat Enterprise Linux 3 | tcpdump | 14:3.7.2-7.E3.2 |
| Red Hat Enterprise Linux 3 | tcpdump-debuginfo | 14:3.7.2-7.E3.2 |