Nom du paquet
tcpdump
Date
2007-03-08
Advisory ID
MDKSA-2007:056
Affected versions
CS4.0 x86_64 , 2006.0 i586 , 2007.0 x86_64 , 2007.0 i586 , CS3.0 x86_64 , CS4.0 i586 , CS3.0 i586 , 2006.0 x86_64

Problem description

Off-by-one buffer overflow in the parse_elements function in the 802.11
printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows
remote attackers to cause a denial of service (crash) via a crafted
802.11 frame. NOTE: this was originally referred to as heap-based, but
it might be stack-based.

Updated packages have been patched to address this issue.

Updated packages

CS4.0 x86_64

 a0955040cd81b0d5189e2b72fdddf459  corporate/4.0/x86_64/tcpdump-3.9.3-1.3.20060mlcs4.x86_64.rpm 
 d849293ac434f50fb2159bf0298a9921  corporate/4.0/SRPMS/tcpdump-3.9.3-1.3.20060mlcs4.src.rpm

2006.0 i586

 d92b272b29238545670818ca1d03b171  2006.0/i586/tcpdump-3.9.3-1.3.20060mdk.i586.rpm 
 66d13291c325f4c08725ee28fd57c21d  2006.0/SRPMS/tcpdump-3.9.3-1.3.20060mdk.src.rpm

2007.0 x86_64

 e0c4b35447b06600387db895f2ecee54  2007.0/x86_64/tcpdump-3.9.4-1.1mdv2007.0.x86_64.rpm 
 ba39819805f0935af53e2ec77b302d14  2007.0/SRPMS/tcpdump-3.9.4-1.1mdv2007.0.src.rpm

2007.0 i586

 34629bcb6e9ee83b6e9163bd0e3ab889  2007.0/i586/tcpdump-3.9.4-1.1mdv2007.0.i586.rpm 
 ba39819805f0935af53e2ec77b302d14  2007.0/SRPMS/tcpdump-3.9.4-1.1mdv2007.0.src.rpm

CS3.0 x86_64

 b3440b61b1aaca36fb7426d2108d5a99  corporate/3.0/x86_64/tcpdump-3.8.1-1.3.C30mdk.x86_64.rpm 
 978aeb218783686a74e4d2a6e1b772fb  corporate/3.0/SRPMS/tcpdump-3.8.1-1.3.C30mdk.src.rpm

CS4.0 i586

 b0d581c7c0166447c32019849638002e  corporate/4.0/i586/tcpdump-3.9.3-1.3.20060mlcs4.i586.rpm 
 d849293ac434f50fb2159bf0298a9921  corporate/4.0/SRPMS/tcpdump-3.9.3-1.3.20060mlcs4.src.rpm

CS3.0 i586

 f6dc96b67852e9a31868433020500ea1  corporate/3.0/i586/tcpdump-3.8.1-1.3.C30mdk.i586.rpm 
 978aeb218783686a74e4d2a6e1b772fb  corporate/3.0/SRPMS/tcpdump-3.8.1-1.3.C30mdk.src.rpm

2006.0 x86_64

 9a66f32f4fd622c3986a80dd447bad10  2006.0/x86_64/tcpdump-3.9.3-1.3.20060mdk.x86_64.rpm 
 66d13291c325f4c08725ee28fd57c21d  2006.0/SRPMS/tcpdump-3.9.3-1.3.20060mdk.src.rpm

References