| Package | Affected versions | Patched versions |
|---|---|---|
| tcpdump | = 3.4= 3.4a6= 3.5= 3.5.2= 3.5_alpha= 3.6.2= 3.6.3= 3.7= 3.7.1= 3.7.2= 3.8.1= 3.8.2= 3.8.3= 3.9= 3.9.1 |
The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free