| Package | Affected versions | Patched versions |
|---|---|---|
| tcpdump | = 3.4= 3.5= 3.5.2= 3.6.2= 3.6.3= 3.7 |
The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free