CVE-2005-1267 Denial of service in n/a
Remote attackers can cause a denial of service via infinite loop in tcpdump by sending crafted BGP packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-1267?
CVE-2005-1267 is a medium-severity denial of service vulnerability in Gentoo Linux, published on 20 Jun 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.
Which versions are affected by CVE-2005-1267?
It affects 5 products.
Linux distribution packages (16)
arpwatch Red Hat:enterprise_linux:4::as | All versions | 14:2.1a13-10.RHEL4 |
libpcap Red Hat:enterprise_linux:4::as | All versions | 14:0.8.3-10.RHEL4 |
tcpdump Red Hat:enterprise_linux:4::as | All versions | 14:3.8.2-10.RHEL4 |
tcpdump-debuginfo Red Hat:enterprise_linux:4::as | All versions | 14:3.8.2-10.RHEL4 |
arpwatch Red Hat:enterprise_linux:4::desktop | All versions | 14:2.1a13-10.RHEL4 |
libpcap Red Hat:enterprise_linux:4::desktop | All versions | 14:0.8.3-10.RHEL4 |
tcpdump Red Hat:enterprise_linux:4::desktop | All versions | 14:3.8.2-10.RHEL4 |
tcpdump-debuginfo Red Hat:enterprise_linux:4::desktop | All versions | 14:3.8.2-10.RHEL4 |
arpwatch Red Hat:enterprise_linux:4::es | All versions | 14:2.1a13-10.RHEL4 |
libpcap Red Hat:enterprise_linux:4::es | All versions | 14:0.8.3-10.RHEL4 |
tcpdump Red Hat:enterprise_linux:4::es | All versions | 14:3.8.2-10.RHEL4 |
tcpdump-debuginfo Red Hat:enterprise_linux:4::es | All versions | 14:3.8.2-10.RHEL4 |
arpwatch Red Hat:enterprise_linux:4::ws | All versions | 14:2.1a13-10.RHEL4 |
libpcap Red Hat:enterprise_linux:4::ws | All versions | 14:0.8.3-10.RHEL4 |
tcpdump Red Hat:enterprise_linux:4::ws | All versions | 14:3.8.2-10.RHEL4 |
tcpdump-debuginfo Red Hat:enterprise_linux:4::ws | All versions | 14:3.8.2-10.RHEL4 |
Products include Gentoo Linux, Lbl Tcpdump, Mandrakesoft Mandrake Linux, Redhat Fedora Core, Trustix Secure Linux.
How do I fix CVE-2005-1267?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2005-1267 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2005-1267 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Gentoo Linux
Sources
Also known as DEBIAN-CVE-2005-1267, DSA-854-1, GHSA-p5p7-x2fv-868r, RHSA-2005:505.