TCPDump: Decoding routines Denial of Service vulnerability

Background TCPDump is a tool for network monitoring and data acquisition. Description TCPDump improperly handles and decodes ISIS CAN-2005-1278, BGP CAN-2005-1267, CAN-2005-1279, LDP CAN-2005-1279 and RSVP CAN-2005-1280 packets. TCPDump might loop endlessly after receiving malformed packets. Impa...

USN-119-1: tcpdump vulnerabilities

It was discovered that certain invalid GRE, LDP, BGP, and RSVP packets triggered infinite loops in tcpdump, which caused tcpdump to stop working. This could be abused by a remote attacker to bypass tcpdump analysis of network traffic...

CVE-2005-1279

tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service infinite loop via a crafted 1 BGP packet, which is not properly handled by RTROUTINGINFO, or 2 LDP packet, which is not properly handled by the ldpprint function...

CVE-2005-1280

The rsvpprint function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service infinite loop via a crafted RSVP packet of length 4...

CVE-2005-1280

The rsvpprint function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service infinite loop via a crafted RSVP packet of length 4...

CVE-2005-1278

The isisprint function, as called by isoclnsprint, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service infinite loop via a zero length, as demonstrated using a GRE packet...

CVE-2005-1279

tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service infinite loop via a crafted 1 BGP packet, which is not properly handled by RTROUTINGINFO, or 2 LDP packet, which is not properly handled by the ldpprint function...

CVE-2005-1278

The isisprint function, as called by isoclnsprint, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service infinite loop via a zero length, as demonstrated using a GRE packet...

DEBIAN-CVE-2005-1280

The rsvpprint function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service infinite loop via a crafted RSVP packet of length 4...

DEBIAN-CVE-2005-1279

tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service infinite loop via a crafted 1 BGP packet, which is not properly handled by RTROUTINGINFO, or 2 LDP packet, which is not properly handled by the ldpprint function...

CVE-2005-1279

tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service infinite loop via a crafted 1 BGP packet, which is not properly handled by RTROUTINGINFO, or 2 LDP packet, which is not properly handled by the ldpprint function...

CVE-2005-1280

The rsvpprint function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service infinite loop via a crafted RSVP packet of length 4...

DEBIAN-CVE-2005-1278

The isisprint function, as called by isoclnsprint, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service infinite loop via a zero length, as demonstrated using a GRE packet...

tcpdump(/ethereal)[]: (RSVP) rsvp_print() infinite loop DOS.

i made a second message for this because it also effects ethereal, both tcpdump and ethereal are patched in the current cvs/svn versions tcpdump workaround: tcpdump ip proto not rsvp original DOS exploit reference: http://fakehalo.us/xtcpdump+ethr-rsvp-dos.c ---------------- exploit:...

tcpdump[v3.8.x/v3.9.1]: ISIS, BGP, and LDP infinite loop DOS exploits.

everything is now patched in CVS-current, including the ISIS bug infinite loop DOS bugs in tcpdump: ISIS isisprint infinite loop DOS. BGP RTROUTINGINFO infinite loop DOS. LDP ldpprint infinite loop DOS. the ISIS bug is in 3.8.x/3.9.1/CVS. did not check below 3.8.x the BGP and LDP bugs seem to be...

CVE-2005-1278

CVE-2005-1278 affects tcpdump up to version 3.9.1, where isis_print invoked by isoclns_print can be triggered by a zero-length GRE packet to cause a denial of service (infinite loop). Connected advisories (Red Hat, CentOS, Gentoo, Ubuntu, OpenVAS/Nessus entries) confirm tcpdump-related fixes and ...

CVE-2005-1278

The isisprint function, as called by isoclnsprint, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service infinite loop via a zero length, as demonstrated using a GRE packet...

CVE-2005-1279

CVE-2005-1279 affects tcpdump up to version 3.8.3 (and related issues CVE-2005-1278, CVE-2005-1280). The vulnerability is a denial-of-service via infinite loops caused by improper handling in the BGP dissector (RT_ROUTING_INFO) and the LDP packet handling in ldp_print, exploitable by crafted netw...

CVE-2005-1279

tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service infinite loop via a crafted 1 BGP packet, which is not properly handled by RTROUTINGINFO, or 2 LDP packet, which is not properly handled by the ldpprint function...

CVE-2005-1280

The rsvpprint function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service infinite loop via a crafted RSVP packet of length 4...