PT-2001-1093 · Tcpdump · Tcpdump

Publicado

2001-11-28

·

Atualizado

2016-10-18

·

CVE-1999-1024

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Tcpdump version 3.4a
Description The issue allows remote attackers to cause a denial of service via a packet with a zero length header. This results in an infinite loop and core dump when Tcpdump prints the packet.
Recommendations For Tcpdump version 3.4a, consider updating to a newer version that addresses this issue, as the current version is affected by the denial of service vulnerability caused by packets with zero length headers.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-1999-1024

Produtos afetados

Tcpdump