Vulnerability Details : CVE-2004-0184
Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.
Vulnerability category: Denial of service
Exploit prediction scoring system (EPSS) score for CVE-2004-0184
Probability of exploitation activity in the next 30 days: 68.37%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 98 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2004-0184
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
CWE ids for CVE-2004-0184
-
The product reads data past the end, or before the beginning, of the intended buffer.Assigned by: nvd@nist.gov (Primary)
-
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.Assigned by: nvd@nist.gov (Primary)
References for CVE-2004-0184
-
http://www.trustix.org/errata/2004/0015
Trustix | Empowering Trust and Security in the Digital AgeBroken Link
-
http://www.redhat.com/support/errata/RHSA-2004-219.html
SupportBroken Link
-
https://bugzilla.fedora.us/show_bug.cgi?id=1468
Broken Link;Issue Tracking
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/15679
tcpdump ISAKMP packet integer underflow CVE-2004-0184 Vulnerability ReportBroken Link;VDB Entry
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9581
404 Not FoundBroken Link
-
http://www.tcpdump.org/tcpdump-changes.txt
Release Notes
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A976
404 Not FoundBroken Link
-
http://securitytracker.com/id?1009593
GoDaddy Domain Name SearchBroken Link;Third Party Advisory;VDB Entry
-
http://www.debian.org/security/2004/dsa-478
Debian -- The Universal Operating SystemBroken Link;Patch;Vendor Advisory
-
http://secunia.com/advisories/11258
About Secunia Research | FlexeraBroken Link
-
http://marc.info/?l=bugtraq&m=108067265931525&w=2
'R7-0017: TCPDUMP ISAKMP payload handling denial-of-service vulnerabilities' - MARCMailing List;Third Party Advisory
-
http://www.rapid7.com/advisories/R7-0017.html
404 Page Not FoundBroken Link;Exploit;Vendor Advisory
-
http://www.securityfocus.com/bid/10004
Broken Link;Third Party Advisory;VDB Entry
-
http://www.kb.cert.org/vuls/id/492558
VU#492558 - tcpdump contains integer underflow vulnerability in ISAKMP "Identification Payload" handlingThird Party Advisory;US Government Resource
Products affected by CVE-2004-0184
- cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*