| Package | Affected versions | Patched versions |
|---|---|---|
| ethereal | = 0.8.4= 0.8.5= 0.8.6 | |
| tcpdump | = 3.4= 3.5a |
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free