Lucene search

K
ubuntuUbuntuUSN-119-1
HistoryMay 06, 2005 - 12:00 a.m.

tcpdump vulnerabilities

2005-05-0600:00:00
ubuntu.com
26

6.2 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.828 High

EPSS

Percentile

98.4%

Releases

  • Ubuntu 5.04
  • Ubuntu 4.10

Details

It was discovered that certain invalid GRE, LDP, BGP, and RSVP packets
triggered infinite loops in tcpdump, which caused tcpdump to stop
working. This could be abused by a remote attacker to bypass tcpdump
analysis of network traffic.

OSVersionArchitecturePackageVersionFilename
Ubuntu5.04noarchtcpdump< *UNKNOWN
Ubuntu4.10noarchtcpdump< *UNKNOWN

6.2 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.828 High

EPSS

Percentile

98.4%