CVE-2005-1278
Fixed in a distro release EPSS 11%
The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet.
Products: lbl tcpdump
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tcpdump | 3.8.3-4 |
| Debian 13 | tcpdump | 3.8.3-4 |
| Debian 14 | tcpdump | 3.8.3-4 |
| Red Hat Enterprise Linux 3 | libpcap | 14:0.7.2-7.E3.5 |
| Red Hat Enterprise Linux 3 | tcpdump | 14:3.7.2-7.E3.5 |
| Red Hat Enterprise Linux 3 | tcpdump-debuginfo | 14:3.7.2-7.E3.5 |
| Red Hat Enterprise Linux 4 | arpwatch | 14:2.1a13-9.RHEL4 |
| Red Hat Enterprise Linux 4 | libpcap | 14:0.8.3-9.RHEL4 |
| Red Hat Enterprise Linux 4 | tcpdump | 14:3.8.2-9.RHEL4 |
| Red Hat Enterprise Linux 4 | tcpdump-debuginfo | 14:3.8.2-9.RHEL4 |