CVE-2007-1218
Fixed in a distro release EPSS 3%
Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based.
Products: tcpdump
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tcpdump | 3.9.5-2 |
| Debian 13 | tcpdump | 3.9.5-2 |
| Debian 14 | tcpdump | 3.9.5-2 |
| Debian 3.1 | tcpdump | 3.8.3-5sarge2 |
| Red Hat Enterprise Linux 4 | arpwatch | 14:2.1a13-12.el4 |
| Red Hat Enterprise Linux 4 | libpcap | 14:0.8.3-12.el4 |
| Red Hat Enterprise Linux 4 | tcpdump | 14:3.8.2-12.el4 |
| Red Hat Enterprise Linux 4 | tcpdump-debuginfo | 14:3.8.2-12.el4 |
| Red Hat Enterprise Linux 5 | arpwatch | 14:2.1a13-18.el5 |
| Red Hat Enterprise Linux 5 | libpcap | 14:0.9.4-11.el5 |
| Red Hat Enterprise Linux 5 | libpcap-devel | 14:0.9.4-11.el5 |
| Red Hat Enterprise Linux 5 | tcpdump | 14:3.9.4-11.el5 |
| Red Hat Enterprise Linux 5 | tcpdump-debuginfo | 14:3.9.4-11.el5 |