CVE-2007-3798
Fixed in a distro release EPSS 70%CVSS 9.8
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.
Products: tcpdump, canonical ubuntu_linux, debian_linux, slackware, freebsd, apple mac_os_x, apple mac_os_x_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tcpdump | 3.9.5-3 |
| Debian 13 | tcpdump | 3.9.5-3 |
| Debian 14 | tcpdump | 3.9.5-3 |
| Debian 3.1 | tcpdump | 3.8.3-5sarge3 |
| Debian 4.0 | tcpdump | 3.9.5-2etch1 |
| Red Hat Enterprise Linux 4 | arpwatch | 14:2.1a13-12.el4 |
| Red Hat Enterprise Linux 4 | libpcap | 14:0.8.3-12.el4 |
| Red Hat Enterprise Linux 4 | tcpdump | 14:3.8.2-12.el4 |
| Red Hat Enterprise Linux 4 | tcpdump-debuginfo | 14:3.8.2-12.el4 |
| Red Hat Enterprise Linux 5 | arpwatch | 14:2.1a13-18.el5 |
| Red Hat Enterprise Linux 5 | libpcap | 14:0.9.4-11.el5 |
| Red Hat Enterprise Linux 5 | libpcap-devel | 14:0.9.4-11.el5 |
| Red Hat Enterprise Linux 5 | tcpdump | 14:3.9.4-11.el5 |
| Red Hat Enterprise Linux 5 | tcpdump-debuginfo | 14:3.9.4-11.el5 |