Red Hat Security AdvisoryRHSA-2007:0368
tcpdump security and bug fix update
Released 2007-11-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) arpwatch-14:2.1a13-18.el5, arpwatch-14:2.1a13-18.el5.i386, arpwatch-14:2.1a13-18.el5.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) libpcap-14:0.9.4-11.el5, libpcap-14:0.9.4-11.el5.i386, tcpdump-14:3.9.4-11.el5 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) arpwatch-14:2.1a13-18.el5, arpwatch-14:2.1a13-18.el5.i386, libpcap-devel-14:0.9.4-11.el5 +2
Fixes 2 records
Priority CRITICAL 86
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.70386 · Published 2007-07-16 · Fixed CWE-252
Priority LOW 35
Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted 802.11 frame.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02915 · Published 2007-03-02 · Fixed CWE-119
