Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
tcpdump BGP parsing can be exploited
published 4 days ago
Summary
The tcpdump tool used to capture network traffic has a flaw in its BGP (Border Gateway Protocol) parser in versions before 4. An attacker could craft specific BGP packets that cause the program to behave incorrectly, potentially leading to a crash or unexpected behavior. Upgrade tcpdump to version 4 or later to resolve the issue.
What to do
- Update cleanstart tcpdump to version 4.9.3-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | tcpdump |
< 4.9.3-r0 Fix: upgrade to 4.9.3-r0
|
Original advisory text
BGP parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The BGP parser in tcpdump before 4.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2023-TX43877 · OSV
Track software like this
Free during beta