Secunia

George Bakos, Jonathan Heusser, and Przemyslaw Frasunek have reported four vulnerabilities in tcpdump, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

The vulnerabilities are caused due to missing argument checks in various functions in the ISAMKP, RADIUS, and L2TP decoding routines. This can be exploited by sending specially crafted packets on a network monitored by a system running a vulnerable version of tcpdump.

Successful exploitation crashes tcpdump and may potentially allow execution of arbitrary code.

The vulnerabilities have been reported in version 3.8.1 and prior.

Solution
The vulnerabilities have been fixed in revision 1.42 available at the CVS repository.
Further details available in Customer Area

Provided and/or discovered by
George Bakos, Jonathan Heusser, and Przemyslaw Frasunek.

Changelog
Further details available in Customer Area

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area