CVE-2003-0108: lbl tcpdump

EPSS trend

Probability

11.34%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 11.34% on 18-09-2026

18-09-202618-10-2026

EPSS score

11.34%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedoslinuxVerified
TCPDump 3.x - Malformed ISAKMP Packet Denial of Service
Maturity: poc

References

13 links

www.idefense.com/advisory/02.27.03.txtX Refsource MISCPatchVendor Advisory
marc.info?l=bugtraq&m=104678787109030&w=2Mailing ListX Refsource BUGTRAQ
www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027Vendor AdvisoryX Refsource MANDRAKE
www.securityfocus.com/bid/6974VDB EntryX Refsource BIDPatchVendor Advisory
www.redhat.com/support/errata/RHSA-2003-214.htmlVendor AdvisoryX Refsource REDHAT
www.debian.org/security/2003/dsa-255Vendor AdvisoryX Refsource DEBIANPatch
marc.info?l=bugtraq&m=104637420104189&w=2Mailing ListX Refsource BUGTRAQ
www.redhat.com/support/errata/RHSA-2003-085.htmlVendor AdvisoryX Refsource REDHAT
www.redhat.com/support/errata/RHSA-2003-032.htmlVendor AdvisoryX Refsource REDHAT
www.iss.net/security_center/static/11434.phpVDB EntryX Refsource XFVendor Advisory

Show all 13 references

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000629Vendor AdvisoryX Refsource CONECTIVA
www.novell.com/linux/security/advisories/2003_015_tcpdump.htmlVendor AdvisoryX Refsource SUSE
security-tracker.debian.org/tracker/CVE-2003-0108Advisory

Related vulnerabilities

CVE-2003-1029debiantcpdump+19.92%22y ago15-01-2004 05:00The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets.CVE-2003-0093debiantcpdump+11.97%22y ago01-09-2004 04:00The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service (crash) via an invalid RADIUS packet with a header length field of 0, which causes tcpdump to generate data within an infinite loop.CVE-2003-0145debiantcpdump+11.90%22y ago01-09-2004 04:00Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," allows remote attackers to cause a denial of service (infinite loop), a different vulnerability than CAN-2003-0093.CVE-2001-1279lbltcpdump4.78%22y ago01-09-2004 04:00Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026.CVE-2005-1279debiantcpdump+118.72%21y ago26-04-2005 04:00tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.CVE-2005-1280debiantcpdump+110.19%21y ago26-04-2005 04:00The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP packet of length 4.

All vulnerabilities intcpdump

CVE-2003-0108: lbl tcpdump

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References