Rapid7 has discovered two vulnerabilities in TCPDUMP, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerabilities are caused due to errors within the ISAKMP payload handling and may crash TCPDUMP when receiving a packet one of the following specially crafted payloads:

1) An ISAKMP packet with a "Delete" payload that includes a large number of SPIs (Security Parameter Indexes).

2) An ISAKMP packet with an "Identification" payload with a value in the "Payload Length" field that becomes less than 8 bytes when the byte order is reversed.

Successful exploitation requires that the "-v" command line option is used.

The vulnerabilities affect version 3.8.1 and prior.

Solution
Update to version 3.8.2 or 3.8.3.
Further details available to Secunia VIM customers

Provided and/or discovered by
Rapid7

Original Advisory
http://www.rapid7.com/advisories/R7-0017.html

Deep Links
Links available to Secunia VIM customers