CVE-2007-3798

CRITICAL

tcpdump <3.9.6 - RCE

Title source: llm

Description

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

Exploits (1)

exploitdb WORKING POC VERIFIED
by mu-b · cremotelinux
https://www.exploit-db.com/exploits/30319

References (35)

... and 15 more

Scores

CVSS v3 9.8
EPSS 0.7269
EPSS Percentile 98.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-252
Status published
Products (19)
apple/mac_os_x 10.0.0 - 10.4.11
apple/mac_os_x_server 10.0.0 - 10.4.11
canonical/ubuntu_linux 6.06
canonical/ubuntu_linux 6.10
canonical/ubuntu_linux 7.04
debian/debian_linux 3.1
debian/debian_linux 4.0
freebsd/freebsd 5.5 (13 CPE variants)
freebsd/freebsd 6.1 (14 CPE variants)
freebsd/freebsd 6.2 (5 CPE variants)
... and 9 more
Published Jul 16, 2007
Tracked Since Feb 18, 2026