The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2005-06-20T04:00:00

Updated: 2024-08-07T21:44:05.956Z

Reserved: 2005-04-25T00:00:00

Link: CVE-2005-1267

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2005-06-10T04:00:00.000

Modified: 2018-10-19T15:31:37.423

Link: CVE-2005-1267

cve-icon Redhat

Severity : Low

Publid Date: 2005-06-06T00:00:00Z

Links: CVE-2005-1267 - Bugzilla