← Database

CVE-2004-0183

MEDIUM CVSS: 5.0 Published: 2004-05-04 Modified: 2026-06-16

Description

TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.

Affected Platforms

Tcpdump Tcpdump

Weakness Type

CWE-125

References