← Database

CVE-2007-3798

CRITICAL CVSS: 9.8 Published: 2007-07-16 Modified: 2026-06-16

Description

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

Affected Platforms

Canonical Ubuntu LinuxFreebsd FreebsdTcpdump TcpdumpSlackware SlackwareApple Mac Os XDebian Debian LinuxApple Mac Os X Server

Weakness Type

CWE-252, CWE-252

References