vendor:
tcpdump
by:
vade79/v9 v9@fakehalo.us (fakehalo/realhalo)
7.5
CVSS
HIGH
Denial of Service (DOS)
400
CWE
Product Name: tcpdump
Affected Version From: 3.8.x
Affected Version To: 3.9.2001
Patch Exists: NO
Related CWE:
CPE: a:tcpdump:tcpdump
Platforms Tested:
Unknown
tcpdump ISIS infinite loop DOS
The tcpdump program, specifically versions 3.8.x to 3.9.1, is vulnerable to a remote denial of service attack. This vulnerability is caused by a single (GRE) packet that triggers an infinite loop in the isis_print() function, which is used in many places by tcpdump. The bug lies in the TLV_ISNEIGH_VARLEN portion of the code, where providing a zero length causes the infinite loop.
Mitigation:
There is no known mitigation or remediation for this vulnerability.
