CVE-2004-0055: lbl tcpdump

EPSS trend

Probability

3.63%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

0.00 pp

From 3.63% on 19-09-2026

19-09-202619-10-2026

EPSS score

3.63%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown

References

27 links

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A850VDB EntrySignatureX Refsource OVAL
distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000832Vendor AdvisoryX Refsource CONECTIVA
www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/10718Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2004-008.htmlVendor AdvisoryX Refsource REDHATPatch
www.redhat.com/archives/fedora-legacy-list/2004-January/msg00726.htmlVendor AdvisoryX Refsource FEDORA
www.securitytracker.com/id?1008735VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/7090VDB EntryX Refsource BIDExploitPatchVendor Advisory
secunia.com/advisories/11032/Third Party AdvisoryX Refsource SECUNIA
marc.info?l=tcpdump-workers&m=107325073018070&w=2Mailing ListX Refsource MLIST

Show all 27 references

www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.htmlMailing ListX Refsource MLIST
www.kb.cert.org/vuls/id/955526Third Party AdvisoryX Refsource CERT VNUS Government Resource
secunia.com/advisories/11022Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/10636Third Party AdvisoryX Refsource SECUNIA
marc.info?l=bugtraq&m=107577418225627&w=2Mailing ListX Refsource BUGTRAQ
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9989VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/12179/Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/10644Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2004:008Vendor AdvisoryX Refsource MANDRAKE
www.debian.org/security/2004/dsa-425Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/10652Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A853VDB EntrySignatureX Refsource OVAL
lists.apple.com/archives/security-announce/2004/Feb/msg00000.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/10639Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-announce-list/2004-March/msg00009.htmlVendor AdvisoryX Refsource FEDORA
lwn.net/Alerts/66445/Vendor AdvisoryX Refsource TRUSTIX
security-tracker.debian.org/tracker/CVE-2004-0055Advisory

Related vulnerabilities

CVE-2003-1029debiantcpdump+19.92%22y ago15-01-2004 05:00The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets.CVE-2003-0093debiantcpdump+11.97%22y ago01-09-2004 04:00The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service (crash) via an invalid RADIUS packet with a header length field of 0, which causes tcpdump to generate data within an infinite loop.CVE-2003-0108debiantcpdump+111.34%22y ago01-09-2004 04:00isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop.CVE-2003-0145debiantcpdump+11.90%22y ago01-09-2004 04:00Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," allows remote attackers to cause a denial of service (infinite loop), a different vulnerability than CAN-2003-0093.CVE-2001-1279lbltcpdump4.78%22y ago01-09-2004 04:00Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026.CVE-2005-1279debiantcpdump+118.72%21y ago26-04-2005 04:00tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP packet, which is not properly handled by RT_ROUTING_INFO, or (2) LDP packet, which is not properly handled by the ldp_print function.

All vulnerabilities intcpdump

CVE-2004-0055: lbl tcpdump

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References