|
|
Info |
Last Modified |
| 8 months ago |
|
|
|
|
Description |
Tcpdump contains a flaw that may allow a remote denial of service. The issue is triggered due to a off-by-one heap overflow in the 'parse_elements()' function. By sending a malformed 802.11 frame, a remote attacker could cause a denial of service resulting in a loss of availability.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Denial of Service
Impact:
Loss of Availability
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to version CVS-Current or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
|
|
Products |
|
tcpdump
 |
3.9.1 |
3.9.5 |
3.9.4 |
3.9.3 |
3.9.2 |
3.9.0 |
|
|
|
|
|
|
Credit |
- Moritz Jodeit - moritz
 jodeit.org - http://www.jodeit.org/
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
