5

CVE-2005-1267: lbl tcpdump

CVSS: 5.0v2.0MediumModified
AliasesRHSA-2005:505DEBIAN-CVE-2005-1267DSA-854-1
Published 20-06-2005Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2005-1267 is a medium (CVSS 5.0) vulnerability in lbl tcpdump. EPSS estimates a 13.50% chance of exploitation in the next 30 days, higher than 96.4% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
33/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.0/10
010
Medium · v2.0 (NVD)
EPSS score
13.50%
0%100%
Medium · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database

Timeline

  1. 20-06-2005
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

13.50%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 13.50% on 19-09-2026

19-09-202619-10-2026
EPSS score
13.50%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • exploit-databasedosmultipleVerified

    Tcpdump - bgp_update_print Remote Denial of Service

    Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat5 products
  • fedora_corecore_3.0 | core_4.0
  • arpwatch< 14:2.1a13-10.RHEL4
  • libpcap< 14:0.8.3-10.RHEL4
  • tcpdump< 14:3.8.2-10.RHEL4
  • tcpdump-debuginfo< 14:3.8.2-10.RHEL4
Debian1 product
  • tcpdump< 3.9.0.cvs.20050614-1 | < 3.8.3-5sarge1
Lbl1 product
  • tcpdump3.4 | 3.4a6 | 3.5 | 3.5.2 | 3.5_alpha | 3.6.2 | 3.6.3 | 3.7 | 3.7.1 | 3.7.2 | 3.8.1 | 3.8.2 | 3.8.3 | 3.9 | 3.9.1
Mandrakesoft1 product
Trustix1 product

5 vendors · 9 products

References

19 links
Show all 19 references