The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero length, as demonstrated using a GRE packet.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tcpdump | Lbl | * | 3.9.1 (including) |
| Red Hat Enterprise Linux 3 | RedHat | tcpdump-14:3.7.2-7.E3.5 | * |
| Red Hat Enterprise Linux 4 | RedHat | tcpdump-14:3.8.2-9.RHEL4 | * |
| Tcpdump | Ubuntu | dapper | * |
| Tcpdump | Ubuntu | devel | * |
| Tcpdump | Ubuntu | edgy | * |
| Tcpdump | Ubuntu | feisty | * |