PT-2005-2274 · Tcpdump+1 · Tcpdump+1
Simon L. Nielsen
·
Publicado
2005-06-10
·
Atualizado
2018-10-19
·
CVE-2005-1267
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions:
tcpdump versions 3.x
Description:
The issue arises from the bgp update print function not properly handling a -1 return value from the decode prefix4 function. This allows remote attackers to cause a denial of service, resulting in an infinite loop, via a crafted BGP packet.
Recommendations:
For tcpdump versions 3.x, consider disabling the bgp update print function as a temporary workaround until a patch is available. Restrict access to the decode prefix4 function to minimize the risk of exploitation. Avoid processing crafted BGP packets in the affected tcpdump versions until the issue is resolved.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Red Hat
Tcpdump