CVE-2007-3798: apple mac_os_x Unchecked Return Value
Vulnerability summary
CVE-2007-3798 is a critical (CVSS 9.8) Unchecked Return Value vulnerability in apple mac_os_x. EPSS estimates a 70.39% chance of exploitation in the next 30 days, higher than 99.3% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 16-07-2007PublishedVulnerability first disclosed.
- 15-10-2024Last modifiedVulnerability information updated.
Description
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.
CVSS metrics
4 scores · 3 sources · 2 versions- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
70.39%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 70.39% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (digit-labs.org)
Maturity: unknown
tcpdump - Print-bgp.C Remote Integer Underflow
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Apple2 products
- mac_os_x≥ 10.0.0, < 10.4.11
- mac_os_x_server≥ 10.0.0, < 10.4.11
Debian2 products
- tcpdump< 3.9.5-3 | < 3.8.3-5sarge3 | < 3.9.5-2etch1
- debian_linuxEOL3.1 | 4.0
Canonical1 product
- ubuntu_linuxEOL6.06 | 6.10 | 7.04
Freebsd1 product
- freebsdEOL≥ 5.0, < 5.5 | ≥ 6.0, < 6.1 | 5.5 | 5.5:p1 | 5.5:p11 | 5.5:p12 | 5.5:p13 | 5.5:p14 | 5.5:p2 | 5.5:p3 | 5.5:p4 | 5.5:p5 | 5.5:p7 | 5.5:p8 | 5.5:p9 | 6.1 | 6.1:p1 | 6.1:p10 | 6.1:p11 | 6.1:p12 | 6.1:p13 | 6.1:p16 | 6.1:p17 | 6.1:p18 | 6.1:p2 | 6.1:p4 | 6.1:p6 | 6.1:p7 | 6.1:p9 | 6.2 | 6.2:p1 | 6.2:p4 | 6.2:p5 | 6.2:p6
Slackware1 product
- slackware9.0 | 9.1 | 10.0 | 10.1 | 10.2 | 11.0 | 12.0
Tcpdump1 product
- tcpdump≤ 3.9.6
6 vendors · 8 products
References
36 links- www.us-cert.gov/cas/techalerts/TA07-352A.htmlThird Party AdvisoryX Refsource CERTBroken LinkUS Government Resource
Show all 36 references
- slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.449313Vendor AdvisoryX Refsource SLACKWAREMailing ListPatch
- www.mandriva.com/security/advisories?name=MDKSA-2007:148Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
- www.securityfocus.com/archive/1/474225/100/0/threadedMailing ListX Refsource BUGTRAQBroken LinkThird Party AdvisoryVDB Entry
- lists.apple.com/archives/security-announce/2007/Dec/msg00002.htmlVendor AdvisoryX Refsource APPLEMailing List
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9771VDB EntrySignatureX Refsource OVALBroken Link
- security.freebsd.org/advisories/FreeBSD-SA-07:06.tcpdump.ascVendor AdvisoryX Refsource FREEBSDThird Party Advisory
- cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11&r2=1.91.2.12X Refsource MISCBroken Link
