Every CVE Search/ Get API key

CVE-2004-0055

The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote...

5.0 MediumFix available

The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.

Exploit likelihood

3.63%Down 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.

Record
CVE-2004-0055
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.

Record
CVE-2004-0055
Updated
2026-11-02
EUVDEUVD-2004-0055 No score

The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.

Record
EUVD-2004-0055
Updated
2026-11-03
GitHub AdvisoriesGHSA-73vp-66j6-8j69 No score

The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote...

The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.

Record
GHSA-73vp-66j6-8j69
Updated
2026-11-02
OSV No score

The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.

Record
CVE-2004-0055
Updated
2026-11-02
OSVDEBIAN-CVE-2004-0055 No score

The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.

Record
DEBIAN-CVE-2004-0055
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tcpdump
Debian:12
 before 3.8.3-1
3.8.3-1
tcpdump
Debian:13
 before 3.8.3-1
3.8.3-1
tcpdump
Debian:14
 before 3.8.3-1
3.8.3-1
tcpdump
Debian:3.0
 before 3.6.2-2.7
3.6.2-2.7
arpwatch
Red Hat:enterprise_linux:2.1::as
 before 14:2.1a11-12.2.1AS.5
14:2.1a11-12.2.1AS.5
libpcap
Red Hat:enterprise_linux:2.1::as
 before 14:0.6.2-12.2.1AS.5
14:0.6.2-12.2.1AS.5
tcpdump
Red Hat:enterprise_linux:2.1::as
 before 14:3.6.2-12.2.1AS.5
14:3.6.2-12.2.1AS.5
arpwatch
Red Hat:enterprise_linux:2.1::aw
 before 14:2.1a11-12.2.1AS.5
14:2.1a11-12.2.1AS.5
libpcap
Red Hat:enterprise_linux:2.1::aw
 before 14:0.6.2-12.2.1AS.5
14:0.6.2-12.2.1AS.5
tcpdump
Red Hat:enterprise_linux:2.1::aw
 before 14:3.6.2-12.2.1AS.5
14:3.6.2-12.2.1AS.5
Show 18 moreShow less
Affected packages
PackageAffectedFixed
arpwatch
Red Hat:enterprise_linux:2.1::es
 before 14:2.1a11-12.2.1AS.5
14:2.1a11-12.2.1AS.5
libpcap
Red Hat:enterprise_linux:2.1::es
 before 14:0.6.2-12.2.1AS.5
14:0.6.2-12.2.1AS.5
tcpdump
Red Hat:enterprise_linux:2.1::es
 before 14:3.6.2-12.2.1AS.5
14:3.6.2-12.2.1AS.5
arpwatch
Red Hat:enterprise_linux:2.1::ws
 before 14:2.1a11-12.2.1AS.5
14:2.1a11-12.2.1AS.5
libpcap
Red Hat:enterprise_linux:2.1::ws
 before 14:0.6.2-12.2.1AS.5
14:0.6.2-12.2.1AS.5
tcpdump
Red Hat:enterprise_linux:2.1::ws
 before 14:3.6.2-12.2.1AS.5
14:3.6.2-12.2.1AS.5
libpcap
Red Hat:enterprise_linux:3::as
 before 14:0.7.2-7.E3.1
14:0.7.2-7.E3.1
tcpdump
Red Hat:enterprise_linux:3::as
 before 14:3.7.2-7.E3.1
14:3.7.2-7.E3.1
tcpdump-debuginfo
Red Hat:enterprise_linux:3::as
 before 14:3.7.2-7.E3.1
14:3.7.2-7.E3.1
libpcap
Red Hat:enterprise_linux:3::desktop
 before 14:0.7.2-7.E3.1
14:0.7.2-7.E3.1
tcpdump
Red Hat:enterprise_linux:3::desktop
 before 14:3.7.2-7.E3.1
14:3.7.2-7.E3.1
tcpdump-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 14:3.7.2-7.E3.1
14:3.7.2-7.E3.1
libpcap
Red Hat:enterprise_linux:3::es
 before 14:0.7.2-7.E3.1
14:0.7.2-7.E3.1
tcpdump
Red Hat:enterprise_linux:3::es
 before 14:3.7.2-7.E3.1
14:3.7.2-7.E3.1
tcpdump-debuginfo
Red Hat:enterprise_linux:3::es
 before 14:3.7.2-7.E3.1
14:3.7.2-7.E3.1
libpcap
Red Hat:enterprise_linux:3::ws
 before 14:0.7.2-7.E3.1
14:0.7.2-7.E3.1
tcpdump
Red Hat:enterprise_linux:3::ws
 before 14:3.7.2-7.E3.1
14:3.7.2-7.E3.1
tcpdump-debuginfo
Red Hat:enterprise_linux:3::ws
 before 14:3.7.2-7.E3.1
14:3.7.2-7.E3.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-0055 is a medium vulnerability (CVSS 5.0) in Lbl Tcpdump, published January 15, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.63%, the 89th percentile. Fixed in tcpdump 3.8.3-1.

References

Show 40 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open