Re: CVE-2007-1218 applicable to tcpdump 3.9.4?

[Guy Harris <guy () alum mit edu>]

Albert Chin wrote:
> Is CVE-2007-1218 applicable to tcpdump 3.9.4? Doesn't seem so as the
> line in the following patch was added after 3.9.4:

The problem in 3.9.5 was that the line was wrong.

The problem in 3.9.4 and before was that the line was *absent*.

The check makes sure that the amount of stuff to be copied to tim.bitmap 
will fit in tim.bitmap, so if the check is wrong *or* absent, a 
carefully-constructed packet can overflow pbody->tim.bitmap.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.