CVE-2005-1267

medium · 5

The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.

CVSS

13.5%

EPSS (exploit prob.)

96th

EPSS percentile

2005-06-10

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Vendor	Product	Affected versions
lbl	tcpdump	3.4
lbl	tcpdump	3.4a6
lbl	tcpdump	3.5
lbl	tcpdump	3.5.2
lbl	tcpdump	3.5_alpha
lbl	tcpdump	3.6.2
lbl	tcpdump	3.6.3
lbl	tcpdump	3.7
lbl	tcpdump	3.7.1
lbl	tcpdump	3.7.2
lbl	tcpdump	3.8.1
lbl	tcpdump	3.8.2
lbl	tcpdump	3.8.3
lbl	tcpdump	3.9
lbl	tcpdump	3.9.1
gentoo	linux	all versions
mandrakesoft	mandrake_linux	10.1
mandrakesoft	mandrake_linux	10.1
mandrakesoft	mandrake_linux	10.2
mandrakesoft	mandrake_linux	10.2
redhat	fedora_core	core_3.0
redhat	fedora_core	core_4.0
trustix	secure_linux	2.0
trustix	secure_linux	2.1
trustix	secure_linux	2.2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-1267