Lucene search

K
freebsdFreeBSD9FAE0F1F-DF82-11D9-B875-0001020EED82
HistoryJun 09, 2005 - 12:00 a.m.

tcpdump -- infinite loops in protocol decoding

2005-06-0900:00:00
vuxml.freebsd.org
6

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.828 High

EPSS

Percentile

98.4%

Problem Description
Several tcpdump protocol decoders contain programming
errors which can cause them to go into infinite loops.
Impact
An attacker can inject specially crafted packets into the
network which, when processed by tcpdump, could lead to a
denial-of-service. After the attack, tcpdump would no
longer capture traffic, and would potentially use all
available processor time.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreebsd= 5.4UNKNOWN
FreeBSDanynoarchfreebsd< 5.4_2UNKNOWN
FreeBSDanynoarchtcpdump< 3.8.3_2UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.828 High

EPSS

Percentile

98.4%