CVE-2005-1279
Fixed in a distro release EPSS 19%
tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.
Products: lbl tcpdump
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tcpdump | 3.8.3-4 |
| Debian 13 | tcpdump | 3.8.3-4 |
| Debian 14 | tcpdump | 3.8.3-4 |
| Debian 3.0 | tcpdump | 3.6.2-2.9 |
| Red Hat Enterprise Linux 3 | libpcap | 14:0.7.2-7.E3.5 |
| Red Hat Enterprise Linux 3 | tcpdump | 14:3.7.2-7.E3.5 |
| Red Hat Enterprise Linux 3 | tcpdump-debuginfo | 14:3.7.2-7.E3.5 |
| Red Hat Enterprise Linux 4 | arpwatch | 14:2.1a13-9.RHEL4 |
| Red Hat Enterprise Linux 4 | libpcap | 14:0.8.3-9.RHEL4 |
| Red Hat Enterprise Linux 4 | tcpdump | 14:3.8.2-9.RHEL4 |
| Red Hat Enterprise Linux 4 | tcpdump-debuginfo | 14:3.8.2-9.RHEL4 |