CVE-2005-1279
NoneCVSS
—
EPSS
18.7%
Published
May 2, 2005
CISA due date
—
The record
tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | tcpdump | 0 | 3.8.3-4 |
| Debian:12 | tcpdump | 0 | 3.8.3-4 |
| Debian:13 | tcpdump | 0 | 3.8.3-4 |
| Debian:3.0 | tcpdump | 0 | 3.6.2-2.9 |
| Red Hat:enterprise_linux:3::as | libpcap | 0 | 14:0.7.2-7.E3.5 |
| Red Hat:enterprise_linux:3::as | tcpdump | 0 | 14:3.7.2-7.E3.5 |
| Red Hat:enterprise_linux:3::as | tcpdump-debuginfo | 0 | 14:3.7.2-7.E3.5 |
| Red Hat:enterprise_linux:3::desktop | libpcap | 0 | 14:0.7.2-7.E3.5 |
| Red Hat:enterprise_linux:3::desktop | tcpdump | 0 | 14:3.7.2-7.E3.5 |
| Red Hat:enterprise_linux:3::desktop | tcpdump-debuginfo | 0 | 14:3.7.2-7.E3.5 |
| Red Hat:enterprise_linux:3::es | libpcap | 0 | 14:0.7.2-7.E3.5 |
| Red Hat:enterprise_linux:3::es | tcpdump | 0 | 14:3.7.2-7.E3.5 |
| Red Hat:enterprise_linux:3::es | tcpdump-debuginfo | 0 | 14:3.7.2-7.E3.5 |
| Red Hat:enterprise_linux:3::ws | libpcap | 0 | 14:0.7.2-7.E3.5 |
| Red Hat:enterprise_linux:3::ws | tcpdump | 0 | 14:3.7.2-7.E3.5 |
| Red Hat:enterprise_linux:3::ws | tcpdump-debuginfo | 0 | 14:3.7.2-7.E3.5 |
| Red Hat:enterprise_linux:4::as | arpwatch | 0 | 14:2.1a13-9.RHEL4 |
| Red Hat:enterprise_linux:4::as | libpcap | 0 | 14:0.8.3-9.RHEL4 |
| Red Hat:enterprise_linux:4::as | tcpdump | 0 | 14:3.8.2-9.RHEL4 |
| Red Hat:enterprise_linux:4::as | tcpdump-debuginfo | 0 | 14:3.8.2-9.RHEL4 |
| Red Hat:enterprise_linux:4::desktop | arpwatch | 0 | 14:2.1a13-9.RHEL4 |
| Red Hat:enterprise_linux:4::desktop | libpcap | 0 | 14:0.8.3-9.RHEL4 |
| Red Hat:enterprise_linux:4::desktop | tcpdump | 0 | 14:3.8.2-9.RHEL4 |
| Red Hat:enterprise_linux:4::desktop | tcpdump-debuginfo | 0 | 14:3.8.2-9.RHEL4 |
| Red Hat:enterprise_linux:4::es | arpwatch | 0 | 14:2.1a13-9.RHEL4 |
| Red Hat:enterprise_linux:4::es | libpcap | 0 | 14:0.8.3-9.RHEL4 |
| Red Hat:enterprise_linux:4::es | tcpdump | 0 | 14:3.8.2-9.RHEL4 |
| Red Hat:enterprise_linux:4::es | tcpdump-debuginfo | 0 | 14:3.8.2-9.RHEL4 |
| Red Hat:enterprise_linux:4::ws | arpwatch | 0 | 14:2.1a13-9.RHEL4 |
| Red Hat:enterprise_linux:4::ws | libpcap | 0 | 14:0.8.3-9.RHEL4 |
| Red Hat:enterprise_linux:4::ws | tcpdump | 0 | 14:3.8.2-9.RHEL4 |
| Red Hat:enterprise_linux:4::ws | tcpdump-debuginfo | 0 | 14:3.8.2-9.RHEL4 |
Related vulnerabilities
- CVE-2015-2153 The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before… Also affects tcpdump
- CVE-2014-8768 Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2… Also affects tcpdump
- CVE-2007-3798 Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows… Also affects tcpdump
- CVE-2005-1267 The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value… Also affects tcpdump
- CVE-2005-1278 The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows… Also affects tcpdump
- CVE-2005-1280 The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a… Also affects tcpdump
- CVE-2004-0184 Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote… Also affects tcpdump
- CVE-2003-0108 isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial… Also affects tcpdump