| Vulnerability Name: | CVE-2005-1280 (CCN-20291) | ||||||||||||||||||||
| Assigned: | 2005-04-26 | ||||||||||||||||||||
| Published: | 2005-04-26 | ||||||||||||||||||||
| Updated: | 2018-10-19 | ||||||||||||||||||||
| Summary: | The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4. | ||||||||||||||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||||||||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
| ||||||||||||||||||||
| Vulnerability Type: | CWE-Other | ||||||||||||||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||||||||||||||
| References: | Source: CCN Type: FreeBSD Security Advisory FreeBSD-SA-05:10.tcpdump Infinite loops in tcpdump protocol decoding Source: SCO Type: UNKNOWN SCOSA-2005.60 Source: CCN Type: SGI Security Advisory 20050502-01-U SGI Advanced Linux Environment 3 Security Update #37 Source: MITRE Type: CNA CVE-2005-1280 Source: CCN Type: Conectiva Linux Security Announcement CLSA-2005:986 Security fixes for tcpdump Source: CCN Type: RHSA-2005-417 tcpdump security update Source: CCN Type: RHSA-2005-421 tcpdump security update Source: CCN Type: SA15125 tcpdump Multiple Denial of Service Vulnerabilities Source: SECUNIA Type: UNKNOWN 15125 Source: SECUNIA Type: UNKNOWN 18146 Source: CCN Type: ASA-2006-041 Tcpdump Denial of Service (SCOSA-2005.60) Source: CCN Type: GLSA-200505-06 TCPDump: Decoding routines Denial of Service vulnerability Source: REDHAT Type: UNKNOWN RHSA-2005:417 Source: REDHAT Type: UNKNOWN RHSA-2005:421 Source: BUGTRAQ Type: Exploit 20050426 tcpdump(/ethereal)[]: (RSVP) rsvp_print() infinite loop DOS. Source: FEDORA Type: UNKNOWN FLSA:156139 Source: BID Type: UNKNOWN 13390 Source: CCN Type: BID-13390 tcpdump RSVP Decoding Routines Denial Of Service Vulnerability Source: CCN Type: tcpdump Web site TCPDUMP public repository Source: CCN Type: TLSA-2005-63 Tcpdump denial of service attack Source: CCN Type: USN-119-1 tcpdump vulnerabilities Source: XF Type: UNKNOWN tcpdump-rsvpprint-dos(20291) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:10732 Source: SUSE Type: SUSE-SR:2005:017 SUSE Security Summary Report | ||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration RedHat 1:  Denotes that component is vulnerable | ||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||
| |||||||||||||||||||||
| BACK | |||||||||||||||||||||