Skip to content
OpenAdvisories
Critical RHSA-2007:0368 2 CVEs

Red Hat Security Advisory: tcpdump security and bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client libpcap 14:0.9.4-11.el5
Red Hat · RHEL 5 enterprise_linux:5::client tcpdump 14:3.9.4-11.el5
Red Hat · RHEL 5 enterprise_linux:5::client tcpdump-debuginfo 14:3.9.4-11.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation arpwatch 14:2.1a13-18.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libpcap-devel 14:0.9.4-11.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation tcpdump 14:3.9.4-11.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation tcpdump-debuginfo 14:3.9.4-11.el5
Red Hat · RHEL 5 enterprise_linux:5::server arpwatch 14:2.1a13-18.el5
Red Hat · RHEL 5 enterprise_linux:5::server libpcap 14:0.9.4-11.el5
Red Hat · RHEL 5 enterprise_linux:5::server libpcap-devel 14:0.9.4-11.el5
Red Hat · RHEL 5 enterprise_linux:5::server tcpdump 14:3.9.4-11.el5
Red Hat · RHEL 5 enterprise_linux:5::server tcpdump-debuginfo 14:3.9.4-11.el5

Vulnerabilities 2

  • Critical 9.8
    CVE-2007-3798 Public exploit EPSS 70%

    Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute ar…

  • Unscored —

    Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5…

References

  • article
    http://www.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=232347
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=237779
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=241677
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=250275
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0368.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-1218
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1218
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1218
  • report
    https://access.redhat.com/security/cve/CVE-2007-3798
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3798
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3798