vendor:
tcpdump/ethereal
by:
vade79/v9 v9@fakehalo.us (fakehalo/realhalo)
7.5
CVSS
HIGH
Denial of Service
Unknown
CWE
Product Name: tcpdump/ethereal
Affected Version From: tcpdump v3.8.x
Affected Version To: tcpdump v3.9.1
Patch Exists: NO
Related CWE: Unknown
CPE: Unknown
Platforms Tested: Unknown
Unknown
tcpdump/ethereal (RSVP) rsvp_print() infinite loop DOS
The vulnerability exists in tcpdump v3.9.1 and earlier versions, as well as ethereal v0.10.10. It is caused by a single (RSVP) packet that triggers an infinite loop in the rsvp_print() function. Clicking on the packet or receiving ICMP replies can also trigger the vulnerability. The bug is present in the RSVP_OBJ_ERO and RSVP_OBJ_RRO classes.
Mitigation:
Unknown
