Lucene search

K
ubuntuUbuntuUSN-119-1
HistoryMay 06, 2005 - 12:00 a.m.

tcpdump vulnerabilities

2005-05-0600:00:00
ubuntu.com
28

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.828

Percentile

98.4%

Releases

  • Ubuntu 5.04
  • Ubuntu 4.10

Details

It was discovered that certain invalid GRE, LDP, BGP, and RSVP packets
triggered infinite loops in tcpdump, which caused tcpdump to stop
working. This could be abused by a remote attacker to bypass tcpdump
analysis of network traffic.

OSVersionArchitecturePackageVersionFilename
Ubuntu5.04noarchtcpdump< *UNKNOWN
Ubuntu4.10noarchtcpdump< *UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.828

Percentile

98.4%