CVE-2005-1267 The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via...
MediumCVSS 5.0
EPSS 13.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lbl tcpdump | = 3.4 | No fix listed |
| lbl tcpdump | = 3.4a6 | No fix listed |
| lbl tcpdump | = 3.5 | No fix listed |
| lbl tcpdump | = 3.5.2 | No fix listed |
| lbl tcpdump | = 3.5_alpha | No fix listed |
| lbl tcpdump | = 3.6.2 | No fix listed |
| lbl tcpdump | = 3.6.3 | No fix listed |
| lbl tcpdump | = 3.7 | No fix listed |
| lbl tcpdump | = 3.7.1 | No fix listed |
| lbl tcpdump | = 3.7.2 | No fix listed |
| lbl tcpdump | = 3.8.1 | No fix listed |
| lbl tcpdump | = 3.8.2 | No fix listed |
| lbl tcpdump | = 3.8.3 | No fix listed |
| lbl tcpdump | = 3.9 | No fix listed |
| lbl tcpdump | = 3.9.1 | No fix listed |
| gentoo linux | All versions | No fix listed |
| mandrakesoft mandrake linux | = 10.1 | No fix listed |
| mandrakesoft mandrake linux | = 10.2 | No fix listed |
| redhat fedora core | = core_3.0 | No fix listed |
| redhat fedora core | = core_4.0 | No fix listed |
| trustix secure linux | = 2.0 | No fix listed |
| trustix secure linux | = 2.1 | No fix listed |
| trustix secure linux | = 2.2 | No fix listed |
| debian/tcpdump(Debian:12) | < 3.9.0.cvs.20050614-1 | 3.9.0.cvs.20050614-1 |
| debian/tcpdump(Debian:13) | < 3.9.0.cvs.20050614-1 | 3.9.0.cvs.20050614-1 |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/tcpdump(Debian:14) | < 3.9.0.cvs.20050614-1 | 3.9.0.cvs.20050614-1 |
References
- Debian Security Tracker CVE-2005-1267 vendor-advisory
- 15634 patch third-party-advisory vendor-advisory
- 17118 third-party-advisory
- DSA-854 vendor-advisory
- FEDORA-2005-406 patch vendor-advisory
- RHSA-2005:505 vendor-advisory
- FLSA:156139 vendor-advisory
- 13906 vdb-entry
- 2005-0028 patch vendor-advisory
- bugzilla.redhat.com patch vendor-advisory
- oval:org.mitre.oval:def:11148 signature vdb-entry