CVE-2004-0055

Description

The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.

How to fix CVE-2004-0055

To remediate CVE-2004-0055, upgrade the affected package to a fixed version below.

• Debian/tcpdump—upgrade to 3.8.3-1 or later

Is CVE-2004-0055 being exploited?

Low — EPSS is 3.6%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 3.8.3-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2004-0055