Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Tcpdump | — | Apply OS X security update 2007-009 | Dec 16, 2011 | Jul 16, 2007 |
| Debian | — | Upgrade tcpdump | Jul 30, 2024 | Jul 16, 2007 |
| Freebsd | — | Upgrade FreeBSDUpgrade tcpdump | Dec 10, 2025 | Aug 2, 2007 |
| Gentoo Linux | — | Upgrade net-analyzer/tcpdump. | Oct 30, 2017 | Jul 16, 2007 |
| Oracle_linux | — | Upgrade arpwatchUpgrade libpcap-develUpgrade libpcapUpgrade tcpdump | Oct 16, 2024 | Jul 16, 2007 |
| Suse | — | Upgrade tcpdumpUpgrade suse-release | Feb 17, 2015 | Jul 16, 2007 |
| Ubuntu | — | Upgrade tcpdump | Nov 8, 2024 | Jul 16, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub