Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2003-0108 — Infinite Loop in Tcpdump

10 documents9 sources
Severity
5.0MEDIUMNVD
EPSS
17.0%
top 5.00%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
TcpdumpLBL Tcpdump
Timeline
PublishedMar 7
Latest updateApr 29

Description

isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed ISAKMP packet to UDP port 500, which causes tcpdump to enter an infinite loop.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶Debiantcpdump/tcpdump< 3.7.1-1.2+3
▶NVDlbl/tcpdump4 versions+3

Patches

Patch: www.debian.org ↗Patch: www.idefense.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-mf37-67gp-f2x6: isakmp_sub_print in tcpdump 3↗2022-04-29
▶
CVEList
CVE-2003-0108: isakmp_sub_print in tcpdump 3↗2004-09-01
▶
OSV
CVE-2003-0108: isakmp_sub_print in tcpdump 3↗2003-03-07
▶

💥Exploits & PoCs

2
Exploit-DB
Microsoft Office 2003 - '.wps' Local Stack Overflow (MS08-011)↗2008-02-13
▶
Exploit-DB
TCPDump 3.x - Malformed ISAKMP Packet Denial of Service↗2003-03-01
▶

📋Vendor Advisories

3
Citrix
CVE-2007-0108: nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows↗2007-01-09
▶
Red Hat
security flaw↗2003-02-27
▶
Debian
CVE-2003-0108: tcpdump - isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a...↗2003
▶

💬Community

1
Bugzilla
CVE-2003-0108 security flaw↗2018-08-16
▶
CVE-2003-0108 — Infinite Loop in LBL Tcpdump | cvebase