vendor:
tcpdump
by:
vade79/v9 v9@fakehalo.us (fakehalo/realhalo)
7.5
CVSS
HIGH
Remote Denial of Service
CWE
Product Name: tcpdump
Affected Version From: 3.8.x
Affected Version To:
Patch Exists: YES
Related CWE:
CPE:
Platforms Tested:
tcpdump[3.8.x]: (BGP) RT_ROUTING_INFO infinite loop DOS
tcpdump(v3.8.3 and earlier versions) contains a remote denial of service vulnerability in the form of a single (BGP) packet causing an infinite loop. BGP is TCP, however the victim does not have to have the BGP port(179) open to abuse the bug. by sending a specially crafted (spoofed) TCP(ACK)
Mitigation:
this appears to have been fixed in the alpha 3.9.x / CVS versions. although i found no direct mention of the issue itself being resolved, the code has been changed in a way to not allow this to happen.
