CVE-2007-3798: Apple Mac OS X

Critical severity, CVSS 9.8. EPSS: 70.4% chance of exploitation in the next 30 days.

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

Affected products

• Apple Mac OS X: from 10.0.0, before 10.4.11 (fixed in 10.4.11)
• Apple Mac OS X Server: from 10.0.0, before 10.4.11 (fixed in 10.4.11)
• Canonical Ubuntu Linux: version 6.06 only; version 6.10 only; version 7.04 only
• Debian Debian Linux: version 3.1 only; version 4.0 only
• Freebsd Freebsd: from 5.0, before 5.5 (fixed in 5.5); from 6.0, before 6.1 (fixed in 6.1); version 5.5 only; version 6.1 only; version 6.2 only
• Slackware Slackware: version 9.0 only; version 9.1 only; version 10.0 only; version 10.1 only; version 10.2 only; version 11.0 only; …
• Tcpdump Tcpdump: up to and including 3.9.6

Published 2007-07-16. Last modified 2026-06-16.