Stay Secure with the Latest Linux Advisories

security advisoryGentooattack

Gentoo: GLSA-200505-06 Normal: TCPDump Decoding Flaw DoS

A flaw in the decoding of network packets renders TCPDump vulnerable to a remote Denial of Service attack.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200505-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: TCPDump: Decoding routines Denial of Service vulnerability Date: May 09, 2005 Bugs: #90541 ID: 200505-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A flaw in the decoding of network packets renders TCPDump vulnerable to a remote Denial of Service attack. Background ========= TCPDump is a tool for network monitoring and data acquisition. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-analyzer/tcpdump < 3.8.3-r2 > = 3.8.3-r2 Description ========== TCPDump improperly handles and decodes ISIS, BGP, LDP (CAN-2005-1279) and RSVP (CAN-2005-1280) packets. TCPDump might loop endlessly after receiving malformed packets. Impact ===== A malicious remote attacker can exploit the decoding issues for a Denial of Service attack by sending specially crafted packets, possibly causing TCPDump to loop endlessly. Workaround ========= There is no known workaround at this time. Resolution ========= All TCPDump users should upgrade to the latest available version: # emerge --sync # emerge --ask --oneshot --verbose "> =net-analyzer/tcpdump-3.8.3-r2" References ========= [ 1 ] CAN-2005-1279 [ 2 ] CAN-2005-1280 Availability =========== This GLSA and any updates to it are available for viewing at the GentooSecurity Website: https://security.gentoo.org/glsa/200505-06 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org/. License ====== Copyright 2005 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.0/ . Gentoo Linux advisory GLSA 202310-08 details an issue in the OpenSSH implementation that may lead to unauthorized system access.. TCPDump Flaw, Denial of Service, Gentoo Security Advisory, Network Monitoring. . LinuxSecurity.com Team

May 09, 2005 Gentoo