Red Hat Security AdvisoryRHSA-2007:0387
tcpdump security and bug fix update
Released 2007-11-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 arpwatch-14:2.1a13-12.el4, arpwatch-14:2.1a13-12.el4.i386, arpwatch-14:2.1a13-12.el4.ia64 +9
- Red Hat Enterprise Linux Desktop version 4 arpwatch-14:2.1a13-12.el4, arpwatch-14:2.1a13-12.el4.i386, libpcap-14:0.8.3-12.el4 +3
- Red Hat Enterprise Linux ES version 4 arpwatch-14:2.1a13-12.el4, arpwatch-14:2.1a13-12.el4.i386, arpwatch-14:2.1a13-12.el4.ia64 +6
- Red Hat Enterprise Linux WS version 4 arpwatch-14:2.1a13-12.el4, arpwatch-14:2.1a13-12.el4.i386, arpwatch-14:2.1a13-12.el4.ia64 +6
Fixes 2 records
Priority CRITICAL 86
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.70386 · Published 2007-07-16 · Fixed CWE-252
Priority LOW 35
Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted 802.11 frame.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02915 · Published 2007-03-02 · Fixed CWE-119
