Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2004-0183 Details

Description

TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://marc.info/?l=bugtraq&m=108067265931525&w=2	CVE	Mailing ListThird Party Advisory
https://bugzilla.fedora.us/show_bug.cgi?id=1468	CVE	Broken LinkIssue Tracking
http://secunia.com/advisories/11258	CVE	Broken Link
http://secunia.com/advisories/11320	CVE	Broken Link
http://securitytracker.com/id?1009593	CVE	Broken LinkThird Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/15680	CVE	Broken LinkVDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A972	CVE	Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9971	CVE	Broken Link
http://www.debian.org/security/2004/dsa-478	CVE	Broken LinkPatchVendor Advisory
http://www.kb.cert.org/vuls/id/240790	CVE	Third Party AdvisoryUS Government Resource
http://www.rapid7.com/advisories/R7-0017.html	CVE	Broken Link
http://www.redhat.com/support/errata/RHSA-2004-219.html	CVE	Broken Link
http://www.securityfocus.com/bid/10003	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.tcpdump.org/tcpdump-changes.txt	CVE	Release Notes
http://www.trustix.org/errata/2004/0015	CVE	Broken Link
http://marc.info/?l=bugtraq&m=108067265931525&w=2	[email protected]	Mailing ListThird Party Advisory
https://bugzilla.fedora.us/show_bug.cgi?id=1468	[email protected]	Broken LinkIssue Tracking
http://secunia.com/advisories/11258	[email protected]	Broken Link
http://secunia.com/advisories/11320	[email protected]	Broken Link
http://securitytracker.com/id?1009593	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/15680	[email protected]	Broken LinkVDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A972	[email protected]	Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9971	[email protected]	Broken Link
http://www.debian.org/security/2004/dsa-478	[email protected]	Broken LinkPatchVendor Advisory
http://www.kb.cert.org/vuls/id/240790	[email protected]	Third Party AdvisoryUS Government Resource
http://www.rapid7.com/advisories/R7-0017.html	[email protected]	Broken Link
http://www.redhat.com/support/errata/RHSA-2004-219.html	[email protected]	Broken Link
http://www.securityfocus.com/bid/10003	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.tcpdump.org/tcpdump-changes.txt	[email protected]	Release Notes
http://www.trustix.org/errata/2004/0015	[email protected]	Broken Link

see all 30 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-125	Out-of-bounds Read	[email protected]

Affected Products

Product	Versions
tcpdump tcpdump	<= 3.8.1
CPE cpe:2.3:a:tcpdump:tcpdump:::::::: Remediation No remediation found in references.

Change History

9 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 20, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Feb 15, 2024	Modified Analysis	[email protected]
Oct 11, 2017	CVE Modified	[email protected]
Jul 11, 2017	CVE Modified	[email protected]
Oct 18, 2016	CVE Modified	[email protected]
Jan 1, 2004	Initial Analysis	[email protected]