Bugtraq mailing list archives
Re: Remote crash in tcpdump from OpenBSD
From: Henning Brauer <hb-bugtraq () bsws de>
Date: Sat, 20 Dec 2003 20:52:18 +0100
On Sat, Dec 20, 2003 at 05:25:22PM +0100, Przemyslaw Frasunek wrote:
Description:Sending a packet containg 0xff,0x02 bytes to port 1701/udp causes a L2TP protocol parser in tcpdump to enter an infinite loop, eating all available memory and then segfaulting. This bug also affects tcpdump in -CURRENT.How-To-Repeat:tcpdump -i lo0 -n udp and dst port 1701 & perl -e 'print "\xff\x02"' | nc -u localhost 1701
several developers including me cannot reproduce that on -current. -- Henning Brauer, BS Web Services, http://bsws.de hb () bsws de - henning () openbsd org Unix is very simple, but it takes a genius to understand the simplicity. (Dennis Ritchie)
Current thread:
- Remote crash in tcpdump from OpenBSD Przemyslaw Frasunek (Dec 20)
- Re: Remote crash in tcpdump from OpenBSD Henning Brauer (Dec 20)
- Re: Remote crash in tcpdump from OpenBSD Przemyslaw Frasunek (Dec 20)
- <Possible follow-ups>
- Re: Remote crash in tcpdump from OpenBSD mrh_tech (Dec 22)
- Re: Remote crash in tcpdump from OpenBSD Henning Brauer (Dec 20)