Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2007-3798 | Mondoo Vulnerability Intelligence

CVE-2007-3798

CRITICAL9.8

Integer overflow in print-bgp

Published Jul 16, 2007

Modified 1 years ago

No fix available

Details

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.

References

WEBhttp://bugs.gentoo.org/show_bug.cgi?id=184815 WEBhttp://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-bgp.c?r1=1.91.2.11&r2=1.91.2.12 WEBhttp://docs.info.apple.com/article.html?artnum=307179 ADVISORYhttp://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html ADVISORYhttp://secunia.com/advisories/26135 ADVISORYhttp://secunia.com/advisories/26168 ADVISORYhttp://secunia.com/advisories/26223 ADVISORYhttp://secunia.com/advisories/26231 ADVISORYhttp://secunia.com/advisories/26263 ADVISORYhttp://secunia.com/advisories/26266 ADVISORYhttp://secunia.com/advisories/26286 ADVISORYhttp://secunia.com/advisories/26395 ADVISORYhttp://secunia.com/advisories/26404 ADVISORYhttp://secunia.com/advisories/26521 ADVISORYhttp://secunia.com/advisories/27580 ADVISORYhttp://secunia.com/advisories/28136 ADVISORYhttp://security.freebsd.org/advisories/FreeBSD-SA-07:06.tcpdump.asc ADVISORYhttp://security.gentoo.org/glsa/glsa-200707-14.xml ADVISORYhttp://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.449313 ADVISORYhttp://www.debian.org/security/2007/dsa-1353 WEBhttp://www.digit-labs.org/files/exploits/private/tcpdump-bgp.c ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:148 ADVISORYhttp://www.novell.com/linux/security/advisories/2007_16_sr.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2007-0368.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2007-0387.html WEBhttp://www.securityfocus.com/archive/1/474225/100/0/threaded WEBhttp://www.securityfocus.com/bid/24965 WEBhttp://www.securitytracker.com/id?1018434 ADVISORYhttp://www.trustix.org/errata/2007/0023/ADVISORYhttp://www.turbolinux.com/security/2007/TLSA-2007-46.txt ADVISORYhttp://www.ubuntu.com/usn/usn-492-1 ADVISORYhttp://www.us-cert.gov/cas/techalerts/TA07-352A.html WEBhttp://www.vupen.com/english/advisories/2007/2578 WEBhttp://www.vupen.com/english/advisories/2007/4238 WEBhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9771 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2007-3798

CVSS Analysis

CVSS v3.1

9.8

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedJul 16, 2007

ModifiedOct 15, 2024