Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TCPDump ISAKMP标识负载远程整数溢出漏洞
Vulnerability Description
Tcpdump是一款监视网络通信和协议分析工具。 Tcpdump的ISAKMP包显示函数在处理标识负载(Identification payloads)时存在问题，远程攻击者可以利用这个漏洞进行拒绝服务攻击或以进程权限执行任意指令。 带有畸形标识负载的ISAKMP包，如果自报告(self-reported)负载长度比8小，在当字节序转换时会由于读取snap缓冲区之外的数据而引起TCPDUMP崩溃。问题存在于isakmp_id_print()函数的字节序转换中： if (sizeof(*p) < id.h.
CVSS Information
N/A
Vulnerability Type
N/A