CVE-2005-1267: Gentoo Linux

Medium severity, CVSS 5.0. EPSS: 13.5% chance of exploitation in the next 30 days.

The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop) via a crafted BGP packet.

Affected products

• Gentoo Linux: any version
• Lbl Tcpdump: version 3.4 only; version 3.4a6 only; version 3.5 only; version 3.5.2 only; version 3.5_alpha only; version 3.6.2 only; …
• Mandrakesoft Mandrake Linux: version 10.1 only; version 10.2 only
• Red Hat Fedora Core: version core_3.0 only; version core_4.0 only
• Trustix Secure Linux: version 2.0 only; version 2.1 only; version 2.2 only

Published 2005-06-10. Last modified 2026-06-16.