Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TCPDump print-bgp.c文件远程整数下溢漏洞
Vulnerability Description
TCPDump是一款免费的网络分析程序,适用于多种Unix操作系统。 TCPDump在处理畸形BGP报文时存在漏洞,远程攻击者可能利用此漏洞控制运行了TCPDump的机器。 TCPDump的print-bgp.c文件没有正确地使用snprintf()的返回值。如果攻击者发送了特制的BGP报文的话,就可能触发整数下溢,导致执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A