Debian/tcpdump: critical 9.8

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return val

Action: Upgrade tcpdump to 3.9.5-3 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-3798#Debian:13/tcpdump
• https://security-tracker.debian.org/tracker/CVE-2007-3798

published 2007-07-16T22:30:00Z · modified 2026-10-21T18:00:51.079825954Z · JSON