CVE-2005-1267: Medium severity Lbl Tcpdump vulnerability
Published Jun 10, 2005
·Updated
The bgpupdateprint function in tcpdump 3.x does not properly handle a -1 return value from the decodeprefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.
Affected Software
25 affected components
Lbl Tcpdump=3.4
Lbl Tcpdump=3.4a6
Lbl Tcpdump=3.5
Lbl Tcpdump=3.5.2
Lbl Tcpdump=3.5_alpha
Lbl Tcpdump=3.6.2
Lbl Tcpdump=3.6.3
Lbl Tcpdump=3.7
Lbl Tcpdump=3.7.1
Lbl Tcpdump=3.7.2
Lbl Tcpdump=3.8.1
Lbl Tcpdump=3.8.2
Lbl Tcpdump=3.8.3
Lbl Tcpdump=3.9
Lbl Tcpdump=3.9.1
Gentoo Linux
Mandrakesoft Mandrake Linux=10.1
Mandrakesoft Mandrake Linux=10.1
Mandrakesoft Mandrake Linux=10.2
Mandrakesoft Mandrake Linux=10.2
redhat Fedora Core=core_3.0
redhat Fedora Core=core_4.0
Trustix Secure Linux=2.0
Trustix Secure Linux=2.1
Trustix Secure Linux=2.2
Remediation
Patch Available
Patch Available
Patch Available
Event History
Jun 10, 2005
CVE Published
04:00 AM
Jun 20, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1267?
CVE-2005-1267 is classified as a denial of service vulnerability.
2
How do I fix CVE-2005-1267?
To fix CVE-2005-1267, update tcpdump to version 3.9.1 or later.
3
What software versions are affected by CVE-2005-1267?
CVE-2005-1267 affects tcpdump versions 3.4, 3.5, 3.6, 3.7, 3.8, and 3.9.
4
Can CVE-2005-1267 be exploited remotely?
Yes, CVE-2005-1267 can be exploited remotely through crafted BGP packets.
5
What is the main impact of CVE-2005-1267?
The main impact of CVE-2005-1267 is causing an infinite loop that leads to denial of service.