Lucene search

K
ubuntucveUbuntu.comUB:CVE-2004-0184
HistoryMay 04, 2004 - 12:00 a.m.

CVE-2004-0184

2004-05-0400:00:00
ubuntu.com
ubuntu.com
10

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.684 Medium

EPSS

Percentile

97.9%

Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier
allows remote attackers to cause a denial of service (crash) via an ISAKMP
packet with an Identification payload with a length that becomes less than
8 during byte order conversion, which causes an out-of-bounds read, as
demonstrated by the Striker ISAKMP Protocol Test Suite.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchtcpdump< 3.9.4-2ubuntu0.2UNKNOWN
ubuntu6.10noarchtcpdump< 3.9.4-4ubuntu0.2UNKNOWN
ubuntu7.04noarchtcpdump< 3.9.5-2ubuntu1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.684 Medium

EPSS

Percentile

97.9%