OSVDB ID: 17227 Title: tcpdump bgp_update_print() Function Malformed BGP Protocol Data DoS |
Info |
|
|
Dates |
||||
|
|
Description |
tcpdump contains a flaw that may allow a remote denial of service. The issue is triggered when a crafted BGP packet is parsed, causing an infinite loop, and will result in loss of availability for the service. |
Classification |
Location:
Remote/Network Access Required
Attack Type: Denial of Service, Input Manipulation Impact: Loss of Availability Exploit: Exploit Available Disclosure: OSVDB Verified |
Solution |
Upgrade to version 3.9.3 or higher from CVS, as it has been reported to fix this vulnerability. In addition, Simon Nielsen has released a patch for some older versions. |
Products |
|
Credit |
|
security-labs.org - Security Labs