Vulnerability in N/a

CVE-2007-3798

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

EPSS: 0.727 (98.8th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

RHSA-2007:0387 (x_refsource_REDHAT, vendor-advisory)
26231 (x_refsource_SECUNIA, third-party-advisory)
SUSE-SR:2007:016 (vendor-advisory, x_refsource_SUSE)
ADV-2007-4238 (vdb-entry, x_refsource_VUPEN)
TA07-352A (x_refsource_CERT, third-party-advisory)
26168 (x_refsource_SECUNIA, third-party-advisory)
27580 (x_refsource_SECUNIA, third-party-advisory)
28136 (x_refsource_SECUNIA, third-party-advisory)
26286 (x_refsource_SECUNIA, third-party-advisory)
www.digit-labs.org/files/exploits/private/tcpdump-bgp.c (x_refsource_MISC)